Deprecate Avro reflect feature, disable every whitelist packages

[gszadovszky]

Describe the enhancement requested

The community agrees to remove the reflect support for the parquet-avro binding in the next major release. This issue is to track the first step of deprecating the feature. Also the default whitelist of the allowed packages is to be empty to warn the users of the further removal of this feature.

Component(s)

Avro

[gszadovszky]

Since other models are also impacted by security concerns it does not make sense to deprecate/remove it.