Play Framework

chore(deps): update log4j to v2.26.1 (#3)

Renovate bumped framework/dependencies.yml; completed locally with `ant resolve -Dprune=true` (4 jars swapped, 4 pruned, no transitive additions).

Verified against the real 2.26.1 jars, since the build reads framework/lib/ and never parses dependencies.yml:
  - ant test: full unit + integration suite passes
  - play.LoggerJsonFormatTest: 5/5, covering the JsonTemplateLayout + bundled EcsLayout.json path behind application.log.format=json