fix(pulsar): pass webServiceTlsCiphers to Jetty factory

[shoemoney]

Fixes silent ignore of TLS cipher and protocol restrictions in the broker WebService and proxy lookup leg.

Motivation: WebService.java:608 passes getTlsCiphers/getTlsProtocols to the Jetty factory, ignoring webServiceTlsCiphers/webServiceTlsProtocols. ProxyConnection.createClientConfiguration omits ciphers/protocols entirely for the broker lookup client.

Modifications:

• WebService: use firstNonEmpty(getWebServiceTlsCiphers, getTlsCiphers) and same for protocols with fallback, mirroring DefaultBrokerTlsFactory.webPolicy
• ProxyConnection: propagate brokerClientTlsCiphers/brokerClientTlsProtocols to ClientConfigurationData for the lookup leg

Fix verified RED to GREEN. No unrelated formatting.

[lhotari]

Thanks for the PR. There's currently PIP-478 implementation PRs in progress for the master branch which will cover this gap. Please target branch-4.2 with this change (rebase your PR branch on top of origin/branch-4.2 and update the target branch for this PR to apache:branch-4.2).