fix(deps): pin maven-dependency-plugin to 3.9.0 for Java 25 bytecode

The default-bound 3.7.0 bundles an ASM too old to read class-file major
version 69, so dependency:analyze-report crashed with a corrupt-bytecode
error on the Java 25 output. 3.9.0 reads it correctly.

Author: mridang

pom.xml

@@ -136,6 +136,7 @@
       </plugin>
       <plugin>
         <artifactId>maven-dependency-plugin</artifactId>
+        <version>3.9.0</version>
         <configuration>
           <!-- These are referenced only through annotations or the JUnit
                runtime, so bytecode analysis cannot see the usage and reports