DX Core - Manage three last libraries in dx-core CVE report

commons-collections-3.1.jar

• exclude in org.apache:jackrabbit-ocm:jar:2.0.0
• check if any transitive commons-collections >= 3.2.2 drag in, otherwise manage the version in boms & sync with jackrabbit
• re-check workflow functional

slf4j-ext-1.7.25

• exclude in org.testcontainers:testcontainers
• manage in pom, sync the version with current sl4j libs

groovy-all-2.2.1.jar

• manage in boms, same version with groovy group
• upgrade in magnolia-dx-core-integration-tests

postgresql-42.1.4.jre7.jar: notified cloud teams.