Remove pomegranate dep and update boot.core dep
2.1.2 Remove plexus exclusion

Boot 1.0.3 eliminated the pomegranate runtime dependency, which was the
reason for the exclusion. Without the plexus dependency you'll get the
org.codehaus.plexus.util.xml.pull.XmlSerializer exception.