Add spring-security-web parser classpath dependency

[bryceatmoderne]

What's changed?

To address the following observed in customer tenants:

org.openrewrite.internal.RecipeRunException: java.lang.IllegalArgumentException: Unable to find classpath resource dependencies beginning with: 'spring-security-web'.
The caller is of type org.openrewrite.java.security.spring.CsrfProtection$1.

What's your motivation?

Anything in particular you'd like reviewers to focus on?

Why this change wasn't previously necessary?

Anyone you would like to review specifically?

@sambsnyd @timtebeek

Have you considered any alternatives or workarounds?

No

Any additional context

Checklist

• I've added unit tests to cover both positive and negative cases
• I've read and applied the recipe conventions and best practices
• I've used the IntelliJ IDEA auto-formatter on affected files

[timtebeek]

This was missing, and somehow we do not throw an exception when those can not be found, despite this code. I saw the same the other day with a missing dependency in tests. Quite annoying as it leads to silent failures.