Update Mojo deps + threadsafe

Multiple changes:
* bump deps to latest/almost-latest
* change from xdoc to java5 mojo annos
* mark the mojos as threadsafe
* guard actual execution with injected MavenProject monitor