Security cache should be invalidated before a RightUpdatedEvent is triggered

Currently the security cache is invalidated in XWiki Standard through a listener on document events. The problem is that we don't have ordering of the listener events, so it's possible that the RightUpdatedEvent is triggered before the cache is invalidated.
Consumer of the RightUpdatedEvent should be able to assume that the cache has been invalidated when they listen on RightUpdatedEvent, so for that reason we should invalidate the cache right away before triggering the RightUpdatedEvent.