Remove "public" from referenced configurations from auto-configurations

[mhalbritter]

Thanks. We should make the methods package-protected, too. And the class, too, if that's possible.

Originally posted by @mhalbritter in #32883

[mhalbritter]

I removed public from imported configuration classes and written a rule which enforces that.