Test operation security alternatives

[kriptoburak]

Summary

• Add a parser regression for operation security with an anonymous alternative and an API key requirement.
• Assert both operation-level security requirement entries are preserved.

Validation

• Static whitespace check passed before commit.
• Not run: this environment does not have a Java runtime or Maven.