Migrate Spec11 pipeline to flex template (#1073)

* Migrate Spec11 pipeline to flex template

Unfortunately this PR has turned out to be much bigger than I initially
conceived. However this is no good way to separate it out because the
changes are intertwined. This PR includes 3 main changes:

1. Change the spec11 pipline to use Dataflow Flex Template.
2. Retire the use of the old JPA layer that relies on credential saved
   in KMS.
3. Some extensive refactoring to streamline the logic and improve test
   isolation.

* Fix job name and remove projectId from options

* Add parameter logs

* Set RegistryEnvironment

* Remove logging and modify safe browsing API key regex

* Rename a test method and rebase

* Remove unused Junit extension

* Specify job region

release/cloudbuild-deploy.yaml

@@ -37,24 +37,6 @@ steps:
     cat tool-credential.json.enc | base64 -d | gcloud kms decrypt \
       --ciphertext-file=- --plaintext-file=tool-credential.json \
       --location=global --keyring=nomulus-tool-keyring --key=nomulus-tool-key
-# Deploy the Spec11 pipeline to GCS.
-#- name: 'gcr.io/$PROJECT_ID/builder:latest'
-#  entrypoint: /bin/bash
-#  args:
-#  - -c
-#  - |
-#    set -e
-#    if [ ${_ENV} == production ]; then
-#      project_id="domain-registry"
-#    else
-#      project_id="domain-registry-${_ENV}"
-#    fi
-#    echo "gs://$${project_id}-beam/cloudsql/admin_credential.enc"
-#    gsutil cp gs://$PROJECT_ID-deploy/${TAG_NAME}/nomulus.jar .
-#    java -jar nomulus.jar -e ${_ENV} --credential tool-credential.json \
-#      --sql_access_info \
-#      "gs://$${project_id}-beam/cloudsql/admin_credential.enc" \
-#      deploy_spec11_pipeline --project $${project_id}
 # Deploy the invoicing pipeline to GCS.
 - name: 'gcr.io/$PROJECT_ID/nomulus-tool:latest'
   args: