The version of the mockserver test fixture we use has some dependencies with CVEs. There are later versions of those deps that don't have the problems. Use the testbom to specify use of those versions.

This is particularly relevant to some netty artifacts where we don't want to specify a netty artifact in the main pom, since full WF has production use of netty artifacts.