Refresh Netty in the Cassandra migrations image

[sbaum1994]

Problem

The Cassandra migrations image retains Cassandra server Netty 4.1.130.Final
JARs under /opt/cassandra/lib. They are affected by Critical
GHSA-c4c3-7fpv-j4q5
and eight High advisories across netty-handler,
netty-handler-ssl-ocsp, and netty-codec:

• GHSA-272m-gcwp-mpwg
• GHSA-3qp7-7mw8-wx86
• GHSA-558v-64gr-wgg4
• GHSA-c653-97m9-rcg9
• GHSA-g7hg-vrcf-mvmr
• GHSA-mj4r-2hfc-f8p6
• GHSA-wc96-39fc-566f
• GHSA-x4gw-5cx5-pgmh

Netty 4.1.137.Final is the highest required fixed floor in this advisory set.
The migrations workload should not carry a server classpath unless it is
needed by cqlsh, migration execution, or cluster initialization.

Expected outcome

• Determine whether any migrations-image execution path loads the Cassandra
  server JARs.
• Prefer removing unused server libraries. If they are required, replace the
  complete Netty set with one coherent 4.1.137.Final-or-newer version.
• Coordinate the classpath decision with Refresh Jackson and gosu in Cassandra images #1739; do not leave a partially
  updated server library set.
• Run fresh initialization, upgrade, migration, and image tests.
• Publish a replacement release and verify all nine Netty findings are absent.

[balajinvda]

🎉 This issue has been resolved in version nvcf-cassandra-migrations-v0.17.6 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀