bump up to PMD 4.0.3; add note about verifyTarget.sh in README (JBIDE-14971)