Address reported security issues in the panoramapublic module

[vagisha]

Rationale

A security review of the panoramapublic module identified three issues. Two are addressed here. The third is noted below as out of scope by decision.

Changes

Test actions globally swap the NcbiPublicationSearchService singleton with no audit event (Informational)

• The three Selenium-test support actions (SetupMockNcbiServiceAction, RestoreNcbiServiceAction, RegisterMockPublicationAction) swap a process-wide singleton. They are @RequiresSiteAdmin but otherwise reachable in production, and extended ReadOnlyApiAction, which does no CSRF check and is reachable by a plain GET.
• Added requireDevModeForMockNcbiService(): the actions now return 404 on a non-dev-mode server. Dev machines and TeamCity run in dev mode, so tests are unaffected.
• Changed the three actions from ReadOnlyApiAction to MutatingApiAction, since they mutate global state, which also requires a POST with a CSRF token.
• The report suggested adding an audit event or compiling these out of production builds. On review we found that gating them to dev mode is a better fix, since it removes the production attack surface entirely rather than just recording the swap.

Uses System.out instead of Log4J2 (Informational)

• ExperimentModificationGetter: removed System.out helpers printStructuralMod and printIsotopicMod and their call sites.

Tests

• PublicationSearchTest: invoke the three mock-NCBI actions with SimplePostCommand instead of SimpleGetCommand.

Not in scope (by decision)

• The spectral-library source password stored unencrypted in panoramapublic.speclibinfo (the third finding) is deferred. The value is masked on display to non-site-admins, and the at-rest risk is acceptable. We intend to remove this column in future work.