Make OPA file-based bearer token timing configurable

[iting0321]

Summary

This resolves the TODO around hard-coded token timing by adding optional file-based bearer token settings for:

• initial-token-wait
• refresh-retry-interval

Defaults remain unchanged:

• Initial token wait: PT5S
• Refresh retry interval: PT1S

Testing

• extensions/auth/opa/impl/src/test/java/org/apache/polaris/extension/auth/ opa/token/FileBearerTokenProviderTest.java
• extensions/auth/opa/impl/src/test/java/org/apache/polaris/extension/auth/ opa/OpaPolarisAuthorizerFactoryTest.java

Checklist

• 🛡️ Don't disclose security issues! (contact security@apache.org)
• 🔗 Clearly explained why the changes are needed, or linked related issues: Fixes #
• 🧪 Added/updated tests with good coverage, or manually tested (and explained how)
• 💡 Added comments for complex logic
• 🧾 Updated CHANGELOG.md (if needed)
• 📚 Updated documentation in site/content/in-dev/unreleased (if needed)

[Copilot]

Pull request overview

This pull request makes the timing behavior of OPA file-based bearer token handling configurable, replacing previously hard-coded waits/retry intervals while keeping existing defaults.

Changes:

• Add initial-token-wait and refresh-retry-interval to the OPA file-based bearer token configuration (with unchanged defaults).
• Wire the new configuration through OpaPolarisAuthorizerFactory into FileBearerTokenProvider.
• Extend/update unit tests to cover the new retry-interval behavior and updated constructor signature.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
runtime/defaults/src/main/resources/application.properties	Adds commented example properties for the two new timing knobs.
extensions/auth/opa/impl/src/main/java/org/apache/polaris/extension/auth/opa/OpaAuthorizationConfig.java	Introduces optional config fields and validation for initial wait and retry interval.
extensions/auth/opa/impl/src/main/java/org/apache/polaris/extension/auth/opa/OpaPolarisAuthorizerFactory.java	Reads new config values (with defaults) and passes them into the token provider.
extensions/auth/opa/impl/src/main/java/org/apache/polaris/extension/auth/opa/token/FileBearerTokenProvider.java	Stores and uses the configured refresh retry interval instead of a hard-coded value.
extensions/auth/opa/impl/src/test/java/org/apache/polaris/extension/auth/opa/OpaPolarisAuthorizerFactoryTest.java	Updates test instantiation for the new provider constructor parameter.
extensions/auth/opa/impl/src/test/java/org/apache/polaris/extension/auth/opa/token/FileBearerTokenProviderTest.java	Updates constructor calls and adds coverage for configurable refresh-retry-interval scheduling.

[dimas-b]

LGTM 👍 Thanks, @iting0321 !