CVE-2020-2310: Missing permission checks in Jenkins Ansible Plugin allow enumerating credentials IDs

The vulnerability stems from form validation methods (doFill*CredentialsIdItems) that implemented credential ID enumeration without proper permission checks. The commit patching CVE-2020-2310 adds authorization checks (item.hasPermission and Jenkins.ADMINISTER checks) to these methods across multiple files. The original vulnerable versions of these methods accepted a Project parameter without validation, while the patched versions use Item + QueryParameter with security checks. These methods directly correspond to the credential enumeration endpoints described in the vulnerability reports.