fix: preserve document sharing and allow own file updates [DHIS2-9191]

[netroms]

Summary

• Preserve imported sharing in document post-create/update hooks.
• Allow uploaded documents to retain their own assigned file while rejecting another document’s file.
• Add HTTP regressions for sharing and file ownership.

Refs DHIS2-9191.

PUT replacement semantics are unchanged: Reports must use JSON Patch or skipSharing=true to preserve omitted sharing.

Verification

• New regressions: 7/10 fail before the fix; all 10 pass afterward.
• 23 focused controller tests pass, including file-resource and JSON Patch regressions.
• Local Java 17/PostgreSQL instance: 16 PUT/PATCH comparison cases, sharing at creation, and cross-document file rejection verified.

AI Assisted

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud