Fix CodeQL note-level Java cleanups

[vharseko]

Summary

Second note-level CodeQL batch: the mechanical Java cleanups — 52 alerts across 30 files, no behaviour change. Every edit is compiler-checked (a static nested class cannot reach the enclosing instance; a removed local cannot be read).

Rule	Count	Change
java/inefficient-boxed-constructor	9	new Long/Byte/Character/Float/Integer(...) → valueOf(...) (or the primitive passed straight to pad(long)) in InstanceState and ConnectorUtil. These constructors are deprecated for removal since JDK 16.
java/non-static-nested-class	13	static on nested classes that never use the enclosing instance: SQLBuilder.{Column,Table,Join,OrderBy}, RepoJobStore.{TriggerComparator,WaitingTriggers,AcquiredTriggers}, PostgreSQLTableHandler.JsonExtractPathQueryFilterVisitor, Queries.OrientQueryFilterVisitor, ConfigObjectService.ParsedId, ManagedObjectService.ManagedObjectSetRequestHandler, SystemAction.SystemTypeAction, AuthenticationService.SocialAuthModuleConfigFactory.
java/local-variable-is-never-read	13	Dead locals removed: Void result = future.get(), int val = executeUpdate() ×3, unused propertyTable / projectDir / studioUiEnabled / type / result, the two MSG constants left over from commented-out throws in AttributeInfoHelper (with the empty if around one of them), props in DelayedConfigHandler (the getPropertiesToEncrypt call is kept — it validates).
java/inefficient-empty-string-test	5	"".equals(x) → x.isEmpty() where x is a String (JDBCRepoService, OrientDBRepoService ×3, ScriptRegistryService).
java/inconsistent-javadoc-throws	8	@throws removed where the method cannot throw it (AuditServiceImpl, ManagedObjectSet, MaintenanceService ×2, RepoJobStore ×4 — only the four flagged blocks; the other @throws ResourceException in that file are genuine).
java/unknown-javadoc-parameter	5	@param names aligned with the signatures (LinkType, ReconciliationContext, ReconFeeder, ReconStage); the orphaned javadoc of a commented-out method in OperationHelper removed.

Dismissed (6):

• #704–#707 confusing-method-signature — public overloads used across modules (IdentityServer.initInstance, LogUtil.logAtLevel, the Disruptor onEvent handlers, AttributeInfoHelper.build); renaming would be a breaking change.
• #440 non-static-nested-class — ZipArchive's constructor deliberately calls the enclosing resolveChecksumFile(), which UpdateManagerImplTest overrides as a test seam.
• #435 inefficient-empty-string-test — valueAssertion is an Object; "".equals(...) is the right null-safe comparison there.

Deferred (1): #437 ResourceServlet:127 sits in the hunk #202 rewrites; it will follow once that PR lands.

Test plan

• Suites of the 12 touched modules: cluster 3, provisioner-openicf 136, repo-jdbc 4, repo-orientdb 31, script 8, config 11, core 79, maintenance 115, security 18, authnfilter 37, quartz-fragment 8, audit 36 — 0 failures
• CodeQL on this PR closes the alerts listed in the commit message