keep plexus-utils out of plugin bundle
use one bannedDependencies enforcer config w/searchTransitive=true
explain includes for bannedDeps* for clarity
add helper enforce-strict profile
custom testsuite execution