Use hibernate for all DB interactions and ensure PAP uses DB as master of all policy info, not the filesystem.

As a first step to refactor PolicyDbDao and XacmlPapServlet, extract functionality into separate classes. The new classes use the existing code and have not been refactored for SONAR and coverage.