Fix binary tarball generation

- Don't include transitive dependencies
- Place XMvn JARs in lib/ext
Don't hardcode Maven version
Update to latest dependency and plugin versions
Add mandatory assembly ID

Version of assembly plugin was recently bumped.  In currently used
version assembly ID is mandatory, see MASSEMBLY-464.