Do not pull in JSR305 by default

Do not pull in JSR305 by default

The migration to findbugs:annotations is actively hurtful to us,
as JSR305 is clashing on javax.annotation package with JEE
annotations.

This patch removes findbugs:annotations, making them a banned
dependency, and instead defines spotbugs:annotations and
findbugs:jsr305.

spotbugs:annotations replaces findbugs:annotations as the default
dependency.

JIRA: ODLPARENT-198
Change-Id: I3e113fb3af3f2cdd6e4cd6b22ffc0dcac5efbcf9
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>