[FIX] Prevent Hessian2 serializable security bypass via writeReplace (#16287)

[LI123456mo]

Description

This PR resolves a validation bypass during Hessian2 serialization where classes utilizing a custom writeReplace() method could inadvertently circumvent security filters.

Core Changes

• Enforce Validation: Updated Hessian2SerializerFactory to ensure that classes implementing writeReplace() are rigorously checked against the DefaultSerializeClassChecker allowlist and standard serializable structure validations.
• Security Alignment: Prevents unauthorized objects from slipping past the framework's serialization guardrails via custom substitution methods.

Related Issue

Fixes #16287

Checklist

• Code formatted locally via mvn spotless:apply.
• Clear and concise commit messages maintained.