Bind WAC verification to matched Trellis resources

[acoburn]

The WAC authZ filter is applied globally, but it would be better if it was bound to specific Trellis HTTP resources.

The @NameBinding annotation would be appropriate to add here.

This makes it possible to add JAX-RS extension points that can be independent of the WAC filter.