rft - move all versions to dep-management section of parent pom

- update `guava` to `18.0`
- update `commons-lang` to `commons-lang3:3.3.2`
- use scope `provided` for most of deps