Spring Security should adopt JSpecify for Null safety as is done in Spring Framework Related https://github.com/spring-projects/spring-framework/issues/28797