[GEODE-10591] Remediation of CVE-2026-49268

[JinwooHwang]

Affected versions of this package are vulnerable to LDAP Injection in the DefaultLdapRealm class. An attacker can bypass authentication or impersonate other users by injecting LDAP special characters into the Distinguished Name (DN) construction during LDAP bind authentication.

For all changes, please confirm:

• Is there a JIRA ticket associated with this PR? Is it referenced in the commit message?
• Has your PR been rebased against the latest commit within the target branch (typically develop)?
• Is your initial contribution a single, squashed commit?
• Does gradlew build run cleanly?
• Have you written or updated unit tests to verify your changes?
• If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?