Dependency Housekeeping, Round 2

[poikilotherm]

This is a successor story to #5288.

Things left open from that very issue, still to be considered / discussed:

Things open (and will stay open till we are on Glassfish 5+, see #5274)

• Remove AWS SDK bundle and replace with "S3 only"
• Test the S3 stuff against some server to be sure it works, as no integration tests are present (see Running integration tests for more than just API #5068 and S3 URL Endpoint #4690)

Things to consider

• Think and talk about moving local_lib into a GitHub based "poor mans" Maven repo.
• Cleanup direct and transitive deps for the SWORDv2 code
• Think and talk about adding Maven Enforcer as a plugin permanently, maybe add it to the build cycle and fail builds on convergence issues.
• Address more/all conflicts from mvn enforcer:enforce
• Address issues from mvn dependency:analyze
• Think about replacing the retired Apache Abdera library with sth. like ROME - Note: ROME is used by Tika and included anyway.
• Remove orphaned Endorsed Java API leftovers, see also 7bc6c6f
• Stop using Apache Commons Lang v2, see Dependency update: Apache Common Lang v2 -> v3 #6070

[poikilotherm]

Much of this is outdated. Some time in the future, we should take a look at this again. Closing for now.