exclude log4j from pax-logging-service
add the 1.2 Log4J API for any 3rd-party deps that still call it directly