remove crosby, protbuf dependency & sonarbug

[rtroilo]

This PR removes the crosby.binary osm pbf implementation from our repository and replace them with a dependency to:

    <dependency>
        <groupId>org.openstreetmap.pbf</groupId>
        <artifactId>osmpbf</artifactId>
        <version>1.5.0</version>
    </dependency>

It also removes the dependency to google protobuf from the oshdb module. Because we only used the varint encoding from that library and this encoding is a standard, so we provide our own implementation for that.

Corresponding issue

Closes #269, #295

New or changed dependencies

• removed: com.google.protobuf.protobuf-java from oshdb module
• added: org.openstreetmap.pbf.osmpbf to oshdb-tool/oshdb-parser module

Checklist

• My code follows the code-style rules, and I have checked on the static analyses and benchmark (if applicable) results
• I have commented my code
• I have written javadoc (required for public classes and methods)
• I have added sufficient unit tests
• I have made corresponding changes to the documentation
• I have updated the CHANGELOG.md
• I have adjusted the examples or created an issue in the corresponding repository
• I have adjusted the benchmark or created an issue in the corresponding repository

[tyrasd]

• I have updated the CHANGELOG.md

I'd say this is not necessary in this case, since the change is purely internal and doesn't change anything for end users. I'll strike it out above.

[tyrasd]

just a few comments inline