Don't leak logback into the dependency tree of things

logback-classic somehow pulls in slf4j-logback, and one winds up with two logging backends, and sadness and confusion.