Improved Java 17 support and Java runtime docs.

[gianm]

Some work towards #12838.

1. Add a "Java runtime" doc page with information about supported
   Java versions, garbage collection, and strong encapsulation.

2. Update asm and equalsverifier to versions that support Java 17.

3. Add additional "--add-opens" lines to surefire configuration, so
   tests can pass successfully under Java 17.

4. Switch openjdk15 tests to openjdk17.

5. Update FrameFile to specifically mention Java runtime incompatibility
   as the cause of not being able to use Memory.map.

6. Update SegmentLoadDropHandler to log an error for Errors too, not
   just Exceptions. This is important because an IllegalAccessError is
   encountered when the correct "--add-opens" line is not provided,
   which would otherwise be silently ignored.

7. Update example configs to use druid.indexer.runner.javaOptsArray
   instead of druid.indexer.runner.javaOpts. (The latter is deprecated.)

8. Added a run-java command that sets up the proper "--add-opens"
   and "--add-exports" parameters for Java 17, and update out-of-box
   configs to include druid.indexer.runner.javaCommand=bin/run-java
   so this gets used.

[FrankChen021]

I used to submitted a PR #12333 to reflect our support of JDK 11.
If JDK 17 is supported now, I think we also need to update the doc updated in that PR.

[gianm]

Ah, thanks for pointing that out. It's not quite supported yet, this PR is just a step. #12838 describes some more items we will need. We'll at least need to update DataSketches Memory.

[gianm]

When building with openjdk17 In CI, I ran into a problem where pull-deps was run without the necessary exports and opens. So in the latest commit I added a run-java command that sets this stuff up, and am using it in three places:

1. At build time when pull-deps is run
2. At run time for run-druid and run-zk
3. In the default server configs, for druid.indexer.runner.javaCommand, so it gets used for tasks too.

[paul-rogers]

The changes appear to be the result of actually trying Java 17 out with Druid and, as such, the changes are likely valid given that the result works. Reviewed the docs and other bits, all of which look great. LGTM (non-binding)

[xvrl]

should we also mention Adoptium Temurin https://adoptium.net/temurin/releases/ here as one of the non-vendor-specific alternatives?

[gianm]

Good idea. I wasn't aware of that one. Added it.

[FrankChen021]

Wow, all CI have passed. I have taken a loot at most of changes and it LGTM.

One thing I'm not sure is if pull-deps works under JRE 17.

[gianm]

One thing I'm not sure is if pull-deps works under JRE 17.

I did notice that it is run as part of the openjdk17 CI, because there was a problem with it in an earlier version of this patch. So it works at least well enough for that usage (if the strong-encapsulation-related command line parameters are included). I didn't try further usages.