Support encrypted password file during SASL authentication for ZooKeeper C client

[empiredan]

Motivation

Currently, when the meta server connects to ZooKeeper via SASL, the password is stored directly in a plain text file. However, in production environments with high security requirements, storing passwords in plain text files is often not allowed.

Implementation

Starting from the newly released ZooKeeper 3.9.4, the C client supports decrypting passwords stored in files. Therefore, to enhance security, we need to:

1. Upgrade the ZooKeeper C client dependency used by the server to 3.9.4.
2. Add configuration options to the ZooKeeper session class to support decrypting the password in the file using a specified encryption scheme before establishing the connection.

Task list

• build(thirdparty): bump zookeeper-client-c from 3.7.0 to 3.9.4 #2289
• build(images): install pluggable authentication modules for Cyrus SASL on Ubuntu to provide auth mechanisms required for tests #2296
• feat: support encrypted password file during SASL authentication for ZooKeeper C client #2293