test: cover anonymous security references

[kriptoburak]

Summary

• Add a parser test for OpenAPI security requirements that include {} as an anonymous alternative.
• Assert parsed references keep named security schemes only.

Validation

• git diff --check
• Targeted Gradle test not run: local Java runtime unavailable.