Register a policy provider programmatically per application

Current a policy provider can only be added at the system/jvm level. This doesn't play well with cloud deployments, and for those use cases with the authorization rules are application specific.

Add a method to register a policy provider with the `PolicyConfigurationFactory`, so that this policy provider can be used for a single application.

Start by reading PolicyConfigurationFactory and trace how policy providers are currently registered at the system/JVM level. Determine the application-scoped registration entry point and its lifecycle, then verify that a provider registered for one application does not affect other applications. Done means an application can register and use its own policy provider programmatically.

Written by the indexing model from the issue text.