[kitalkuyo-gita]

What changes were proposed in this pull request?

• Mask sensitive configuration values in Console API responses, including nested configurations, while preserving internal configuration values.
• Preserve saved credentials when masked values are submitted during edits; support explicit clearing and reject unresolved masks.
• Require system administrator permissions for cluster/LLM management reads and system-session plugin operations.
• Add minimal cluster/LLM selection endpoints returning only id, name, and type, and migrate frontend selectors.
• Stabilize builds and tests by updating the Node download URL, excluding unused SIGAR dependencies, mocking heartbeat RPC calls, and preserving HBase startup exception causes.

How was this PR tested?

• Tests have Added for the changes
• Production environment verified

Added ConfigSecurityTest and ConfigAccessControlTest covering response masking, authorization, nested configurations, and credential update behavior.

Local validation on Linux ARM64:

• JDK 8: Full 109-module clean test succeeded; 1,806 tests, zero failures/errors.
• JDK 11: CI module set completed through resumed reactor runs; 1,810 tests, zero failures/errors.
• Both matrices retained the repository’s seven default Doris integration-test skips. Required ClickHouse integration tests passed.
• Console suites passed all 34 tests per JDK, including Checkstyle, RAT, and frontend production builds.
• A locally running Console with disposable MySQL passed 37 HTTP/database checks covering authorization, tenant boundaries, masking, and credential updates.