refactor: small maven datasource authentication fixes (#3329)

The documentation states that hostRules can be an object but actually renovate expects a list.

Also, set permission issues verbosity to warning because this is an issue that must be addressed, not just some minor info imo.