fix(vulnerability): Remove fixed version of commons-io dependency to accommodate safer version from kork.

[j-sandy]

CVE-2021-29425

[dbyron-sf]

There's some unwinding of other build issues before I think this PR makes sense. Specifically, see #1894.

[dbyron-sf]

@Mergifyio update

[mergify]

Command update: success

Branch has been successfully updated

[dbyron-sf]

Here's a before:

$ ./gradlew :halyard-backup:dI --dependency commons-io:commons-io

> Task :halyard-backup:dependencyInsight
commons-io:commons-io:2.7
   variant "compile" [
      org.gradle.status              = release (not requested)
      org.gradle.usage               = java-api
      org.gradle.libraryelements     = jar (compatible with: classes+resources)
      org.gradle.category            = library

      Requested attributes not found in the selected variant:
         org.gradle.dependency.bundling = external
         org.gradle.jvm.version         = 11
   ]
   Selection reasons:
      - By constraint
      - By conflict resolution : between versions 2.7 and 2.6

commons-io:commons-io:2.7
\--- io.spinnaker.kork:kork-bom:7.117.0
     \--- compileClasspath

commons-io:commons-io:2.6 -> 2.7
\--- compileClasspath

and after:

$ ./gradlew :halyard-backup:dI --dependency commons-io:commons-io

> Task :halyard-backup:dependencyInsight
commons-io:commons-io:2.7 (by constraint)
   variant "compile" [
      org.gradle.status              = release (not requested)
      org.gradle.usage               = java-api
      org.gradle.libraryelements     = jar (compatible with: classes+resources)
      org.gradle.category            = library

      Requested attributes not found in the selected variant:
         org.gradle.dependency.bundling = external
         org.gradle.jvm.version         = 11
   ]

commons-io:commons-io:2.7
\--- io.spinnaker.kork:kork-bom:7.117.0
     \--- compileClasspath

commons-io:commons-io -> 2.7
\--- compileClasspath

so this is "just" a cleanup, with no change to the version of commons-io. Good times.