Refactor security bootstrapping / basic auth code to be more modular vs. infused throughout the controller and util

Similar to what was done for the TLS code here: https://github.com/apache/solr-operator/pull/309