rework maven dependencies to make our direct deps explicit

next step is to get rid of some libraries we don't need to use anymore and then updating the relevant libraries