MODE-2299, MODE-2305 Updated the build system to use a newer version of the BOM (CR13). 

This solves the CVEs around Apache HttpClient and Apache POI.

Since this version of the BOM also uses the transitive dependency check rule, most of the ModeShape modules were changed & fixed to explicitly define used dependencies.