some more POM cleanup
- use Maven reporting properly
- use jar-no-fork instead of jar for maven-sources-plugin
added a note that 'compile' has to be run before running findbugs