(cherry picked from commit 796716d441)

This is the final commit from the 2.x branch of multiple commits to fix the vulnerabilities
CVE-2019-0213 and CVE-2019-0214

(cherry picked from commit 8e5fdd4536)

(cherry picked from commit a36035b49b)

(cherry picked from commit 63154a6af8)

Signed-off-by: olivier lamy <olamy@apache.org>

RepositoryRegistry is used for indexing context now. There is still more work to do
to move the maven dependent parts into its own projects and update the dependencies.

Adding content provider service that creates repository content instances
remove direct access to the repository content instances.

Switching to the repository registry to retrieve repository data.
Indexing is currently kept in the admin part, but will be moved in the future
to the registry.

Signed-off-by: olivier lamy <olamy@apache.org>

As suggested in the SLF4J FAQ:
https://www.slf4j.org/faq.html#logging_performance
.. parameterized logging can improve the efficiency of logger calls when
logging at the specified level is disabled.

In addition, per the FAQ: https://www.slf4j.org/faq.html#paramException
since SLF4J 1.6.0 it is possible to use parameterized logging and also
log an exception/throwable.

toString() is called automatically:
https://www.slf4j.org/faq.html#string_contents

These changes were suggested by SLF4J Helper for NetBeans IDE:
http://plugins.netbeans.org/plugin/72557/

Signed-off-by: olivier lamy <olamy@apache.org>

Adding new API module (metadata-statistics-api) for statistics and move the
jcr specific tasks to the metadata store module.

Providing interfaces for the statistics API.

Removing dependencies to store specific libraries (like JCR) from the statistic
modules.