Overall speaking put all your class, xml and jar into Axis2\WEB-INF but NONE of them in aar file. This breaks the Axis2 module isolation but it is not a very useful feature at real-world deployment.
Axis2 is a pure-engineering product (just look at all the buzz words they create), they never realize how the real world works. The way they manage the class loader is really a disaster, engineers have fun to play around their toys at the sandbox but never try to figure out how to make it work in real life. I am going to move to CXF or JAX-WS instead of using Axis2