added versions and dependencies for satisfying requireUpperBoundDeps

without jetty related dependencies
Can we remove the drools-wb comment?
I believe that in the future it might be more than drools-wb that requires this due to the enforcer rule, so this comment would wrongly imply that only drools-wb requires it.