Play Framework

chore(deps): upgrade minor/patch dependencies (release 1.13.42)

Bump ~40 dependency groups in framework/dependencies.yml to their latest
in-major releases. The Hibernate-coupled cluster is aligned to what
hibernate-core 7.4.2.Final's POM actually expects (not each lib's own latest):

- Hibernate 7.2.0 -> 7.4.2; hibernate-models 1.0.1 -> 1.1.1;
  byte-buddy 1.17.6 -> 1.18.8; jboss-logging 3.6.1 -> 3.6.3; jandex 3.2.7 -> 3.6.0
- Netty 4.2.13 -> 4.2.15; tcnative 2.0.71 -> 2.0.79; brotli4j 1.16.0 -> 1.23.0
- Jackson 2.21.3 -> 2.22.0; swagger 2.2.39 -> 2.2.52; log4j 2.25.3 -> 2.26.0
- JUnit 6.0.3 -> 6.1.0; okhttp 5.3.2 -> 5.4.0; okio 3.16.4 -> 3.17.0;
  kotlin-stdlib 2.2.21 -> 2.4.0; bouncycastle 1.81 -> 1.84; postgresql 42.7.7 -> 42.7.11
- plus asm, eclipse-jdt, javassist, classmate, snakeyaml, slf4j, gson,
  commons-codec/io/lang3/text/logging, jaxen, cache-api, jakarta.* patch bumps

Also:
- Give antlr4-runtime its real groupId (org.antlr ->) so it resolves from
  Maven Central; it previously only resolved via a vendored lib/ jar and broke
  on the version bump.
- Bump lib-test/byte-buddy-agent to 1.18.8 in lock-step with byte-buddy
  (referenced as a -javaagent in build.xml), per the documented requirement.

Excluded as separate follow-ups: h2, micrometer + prometheus (coupled set),
protobuf (CVE pin held at 3.25.x), and the major upgrades (HikariCP 7,
hibernate-validator 9, jaxb-runtime 4.x, hamcrest 3 migration).

framework/lib/ jars regenerated via `ant resolve -Dprune=true`.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>