[7x] ingest attachment dependency version bumps

[jakelandis]

This commit bumps the follow dependency version for the ingest attachment plugin:

tika-core 1.27 -> 1.28.5
tika-parsers 1.27 -> 1.28.5
commons-io 2.6 -> 2.11
fontbox 2.0.24 -> 2.0.26
poi 4.1.2 -> 5.2.2
poi-ooxml 4.1.2 -> 5.2.2
and poi-/ooxml-schemas is now poi-ooxml-lite and is using 5.2.2
(see https://poi.apache.org/changes.html)
xmlbeans 3.0.1 -> 5.0.3

These versions were chosen from one of the following POM files:
https://repo1.maven.org/maven2/org/apache/tika/tika-parent/1.28.5/tika-parent-1.28.5.pom
https://repo1.maven.org/maven2/org/apache/tika/tika-parsers/1.28.5/tika-parsers-1.28.5.pom
https://repo1.maven.org/maven2/org/apache/tika/tika-core/1.28.5/tika-core-1.28.5.pom
https://repo1.maven.org/maven2/org/apache/poi/poi-ooxml-lite/5.2.2/poi-ooxml-lite-5.2.2.pom

[elasticsearchmachine]

Pinging @elastic/es-data-management (Team:Data Management)

[elasticsearchmachine]

Hi @jakelandis, I've created a changelog YAML for you.

[masseyke]

LGTM. The only discrepancy I see is that I think we're pulling in org.apache.commons:commons-lang3 3.9 vs the 3.12.0 that tika pulls in. We seem to be doing that in 8.x as well though, so it's probably fine.