Actuator-Management changes for Spring Boot 3.5

Includes "Pledge of allegiance" for people who can't read the docs

Related:
* https://bsky.app/profile/lhotari.bsky.social/post/3lpmbdrbzd22a
* https://fahrplan.events.ccc.de/congress/2024/fahrplan/media/38c3/submissions/Q8ZAV9/resources/volksdaten-slides-small_gH8avhn.pdf
* https://media.ccc.de/v/38c3-wir-wissen-wo-dein-auto-steht-volksdaten-von-volkswagen#t=482

Author: AB-xdev

demo/webapp-vaadin/src/main/resources/application.yml

@@ -8,16 +8,22 @@ spring:
         hbm2ddl:
           auto: none
 
+# READ https://docs.spring.io/spring-boot/reference/actuator/endpoints.html BEFORE CHANGING ANYTHING HERE!
+# Pledge of allegiance you sign when commiting this: I know that I'm responsible for security problems when I did not
+# read the docs and I will be sentenced to debug Voyager 1 memory problems (YcUycQoz0zg) or similar complex things
 management:
   endpoints:
     web:
       exposure:
         include: "*"
-        # Env is potentially security sensitive so better hide it
-        exclude: "env"
   endpoint:
+    env:
+      access: none
     health:
-      show-details: "when-authorized"
+      show-details: when-authorized
+    heapdump:
+      access: unrestricted
+
   health:
     # Kubernetes probes
     probes: