BS-10737 [Security] Document API takes an absolute path as documentName

-create TenantFolder class to factorize the code to restrict file location,
-modify fileUploadServlet to : "returnFullPathInResponse = false"
BS-10737 [Security] Document API takes an absolute path as documentName

update service/servlet/api to complete File path if needed, and check Autorization