[codex] Fix Nexus ALL action permission matching

[klboke]

Summary

• Treat Nexus repository privilege action ALL as a wildcard during permission matching.
• Normalize Nexus action aliases only in the permission action segment: ALL -> *, create -> add, and update -> edit.
• Add regression coverage for migrated Nexus repository-view privileges and application action aliases.

Root Cause

Nexus exposes generated nx-repository-view-<format>-<repo>-* privileges with action ALL. kkRepo normalized newly created REST privileges to *, but existing or migrated records that still stored ALL were compared literally, so write/delete permissions could be denied even though Nexus grants them.

Validation

• mvn -pl server -am -Dtest=SecurityManagementServicePermissionTest -Dsurefire.failIfNoSpecifiedTests=false test
• git diff --check
• Live checked local Nexus 28090: nx-repository-view-maven2-maven-dcmes-* and nx-repository-view-maven2-team-dcmes-maven-group-* use ALL and cover the concrete actions.
• Live checked kkRepo 18090: a temp user with only an existing actions: "ALL" repository-view privilege could PUT, GET, browse, and DELETE Maven content.

Fixes #67

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[klboke]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fb9994bd6f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".