Play Framework

fix(deps): complete the Renovate bump — resolve jars, reject byte-buddy's -jdk5 line

Renovate proposed byte-buddy 1.18.10 -> 1.18.11-jdk5. Byte Buddy publishes a
parallel `-jdk5` line, built for Java 5 bytecode, alongside every normal
release: 1.18.11 and 1.18.11-jdk5 both exist. The suffixed one sorts last, so
Maven Central's own <latest>/<release> metadata points at it and Renovate offers
it as a routine patch bump. It is not an upgrade — it swaps in an artifact
targeting a bytecode level far below the Java 25 this framework requires, and
nothing in CI would have flagged it. Pinned to plain 1.18.11 and added a
renovate.json5 allowedVersions rule so the suffixed line can never be proposed
again.

Also ran `ant resolve -Dprune=true`, the step Renovate cannot perform: it
downloads the new jars and prunes the superseded ones under framework/lib/.
Without it dependencies.yml and lib/ disagree, and the test suite passes against
the stale jars — the update looks verified when it is not.

Verified against the newly resolved jars: `ant test` green (704 unit tests, 53
integration tests, 0 failures) and `:gradle-plugin:build` green on the bumped
Gradle 9.6.1 wrapper.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>