[forge-issues] [JBoss JIRA] (FORGE-384) Use dependency management and BOMs not direct manipulation of dependencies