Minor dependency cleanup

Started off as figuring out why test-only deps were ending up in the release packages, which is the pom.xml:313 tweak, and then I noticed some other cruft:

- fdb-sql-layer-jdbc wasn't marked as test
- commons-cli was completely unused
- guice-graph was essentially unused, only through a JMX path no one has probably clicked in ages
- commons-codec was only used for Base64 which also exists in Guava, so replace it

This shaves off around 2 million bytes from the install.