Convert cglib to be a maven project

Initial basis to convert cglib to be a maven project, I suspect there would be further work needed to ensure this work correctly but hopefully helps.

- Two tests were disabled for now since they relied on a signed jar file.
- Maven needs to be updated to generate sources/javadoc jar files
thinking through this, i'm not sure this is the best way to expose the nodep jar to maven (as a separate artifact).  both the normal & nodep artifacts produce the same classnames, except one delegates to real ASM & the other delegates to an embedded ASM.  i think a better way to do this would be to use a classifier on within the cglib pom.  for example, Guice does this with the no_aop build:https://github.com/google/guice/blob/master/core/pom.xml#L189 (though in this case we'd probably do a mixture of the jarjar / no_aop step.. having an execution phase do jarjar + packaging with a different classifier).  we probably want to override the deps also and mark them as compile-only too in the nodep classifier.

then folks'd use it with <classifier>nodep</classifier>.