Java: support more libraries in hardcoded-credentials queries

[smowton]

This is abandoned external PR https://github.com/github/codeql/pull/6716, but I have also written tests and ported the hardcoded-creds queries to use inline-expectations tests so it's practically possible to verify that the results are as expected.