merge gradle/ant test security policies [LUCENE-9159]

Currently gradle has a complete fork of the files.

Rather than maintain separate files, it would be better to just merge in the stuff that gradle needs (and add comments to the ant-specific stuff it doesnt need so it can be later removed).

I noticed this looking at cleaning up network ports permissions on #10198, but would rather fix it first so there isn't copies.

---
Migrated from [LUCENE-9159](https://issues.apache.org/jira/browse/LUCENE-9159) by Robert Muir (@rmuir)
Attachments: [LUCENE-9159_lucene.patch](https://apache.github.io/lucene-jira-archive/attachments/LUCENE-9159/LUCENE-9159_lucene.patch), [LUCENE-9159_replicator.patch](https://apache.github.io/lucene-jira-archive/attachments/LUCENE-9159/LUCENE-9159_replicator.patch)