Support Security Context "readonlyRootFilesystem"

Is your feature request related to a problem? Please describe.
We are using data prepper to forward otel trace data to AWS managed OpenSearch. Our security team would like to enhance Kubernetes OPA requirement for container level security context as

securityContext:
readonlyRootFilesystem

Data Prepper are showing below error in the log

ERROR StatusConsoleListener Unable to create file log/data-prepper/data-prepper.log

java.io.IOException: Could not create directory /usr/share/data-prepper/log/data-prepper
at org.apache.logging.log4j.core.util.FileUtils.mkdir(FileUtils.java:128)
at org.apache.logging.log4j.core.util.FileUtils.makeParentDirs(FileUtils.java:141)

Once I mounted emptydir() for the log path, then data prepper failed on
Caused by: java.lang.RuntimeException: Unable to create the directory at the provided path: service-map

Describe the solution you'd like
A separate mountable filesystem to minimize the security risk

Describe alternatives you've considered (Optional)
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

No file or test is named in the issue. Start by locating the Kubernetes container configuration and the code or configuration that creates the log/data-prepper and service-map paths, then reproduce the failure with readonlyRootFilesystem enabled. Done means Data Prepper starts and writes required data through a separate mountable filesystem.