…ession mojo testing (apache#11103)

Highlights
- All services are injectable into mojos
  - Add InternalSession#getAllServices() to expose all DI service suppliers for the session (Map<Class<? extends Service>, Supplier<? extends Service>>)
  - Add Injector#bindSupplier(Class<T>, Supplier<T>) to bind a type directly to a Supplier
  - Adjust DI bootstrap/bindings (Injector/Binding/InjectorImpl, SisuDiBridgeModule) and touch minor call sites to respect the wiring
- Mojos can be easily tested with a real session
  - @MojoTest(realSession=true) supported by MojoExtension; creates a real InternalSession via ApiRunner, otherwise uses SessionMock
  - New MojoRealSessionTest covers default/custom mock vs real-session paths

Details
- SessionScope alignment: when @typed is empty, include only the class’s direct interfaces (not super-interfaces)
- Testing support: SecDispatcherProvider for encrypted password handling without Sonatype dispatcher; expanded MojoTest for evaluator coverage
- IT: add apachegh-11055-di-service-injection verifying DI service injection end-to-end with pre-populated resources under its/core-it-suite; integrated into TestSuiteOrdering

(cherry picked from commit 6b7c9f2)