resolve multiple CVEs

[janjwerner-confluent]

Fixes # Multiple CVEs in dependencies. .

Description

Update multiple dependencies to clear CVEs
Update docker-java-bom to 3.3.4 and
kubernetes-client to 19.0.0 to move away from bcprov-jdk15 to address: CVE-2023-33201
Update dropwizard-metrics to 4.2.22 to address CVE-2023-46120 in com.rabbitmq:amqp-client
Update avro to 1.11.3 to resolve CVE-2023-39410
Update jackson-databind to 2.12.7.1 to resolve CVE-2022-42003 CVE-2022-42004
Update ant to 1.10.14 to resolve CVE-2020-11979 CVE-2020-1945 CVE-2021-36373 CVE-2021-36374
Update comomons-compress to resolve CVE-2023-42503
Update jose4j to 0.9.3 to resolve CVE-2023-31582 GHSA-jgvc-jfgh-rjvv
Update kotlin-stdlib to 1.4.21 to resolve CVE-2020-29582
Update kafka-client-schema-registry to 6.2.12
Update woodstox-core to 6.4.0 to address CVE-2022-40152
Update aws-java-sdk-bundle to 1.12.497 to remove CVE regressions introduced by ranger update

• updated licenses and suppressions.
• update license checker to provide more verbose information when license is not found

This PR has:

• [ x] been self-reviewed.
  • using the concurrency checklist (Remove this item if the PR doesn't have any relation to concurrency.)
• added documentation for new or modified features or behaviors.
• a release note entry in the PR description.
• added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
• [ x] added or updated version, license, or notice information in licenses.yaml
• added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
• added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code coverage is met.
• added integration tests.
• been tested in a test Druid cluster.

[janjwerner-confluent]

@abhishekagarwal87
Could you help me with the web-checks failing.
I am fixing the remaining license and CVE issues, but I'm stomped with the e2e test.

[janjwerner-confluent]

Cannot update elasticsearch to CVE-2023-31418 CVE-2021-22134 CVE-2021-22135 CVE-2021-22144 CVE-2023-31417 CVE-2023-31419 CVE-2023-46673
nor the elasticsearch-rest-client to address CVE-2021-22145
as Elastic changed the licenses to non permissive dual license.

[janjwerner-confluent]

closing this PR as it's being addressed with a series of smaller efforts.