Use findbugs.annotations instead of findbugs.jsr305

com.google.code.findbugs:jsr305 clashes with com.google.code.findbugs:annotations.  Having both jars as a dependency then clashes with the Maven dependency checker (because it is not very good at handling annotations).

Use the annotations jar instead which has all jsr305 annotations and the additional findbugs stuff.