Change dependency handling to use DependencyManagementKey, which uses GATC (groupId, artifactId, type, classifier) instead of just GA for matching deps in the BOMs. Also, if the specific GATC is missing, try falling back to GA and if found, inject the specific GATC one as a missing dep.