chore: vulns

[ethanpschoen]

Description of this change

address vulnerabilities

Why is this change being made?

• Chore (non-functional changes)
• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)

How was this tested? How can the reviewer verify your testing?

Related issues

Checklist

• I have added tests to cover my changes.
• All new and existing tests passed.
• I have evaluated the security impact of this change, and OWASP Secure Coding Practices have been observed.
• I have informed stakeholders of my changes.

---

Note

Low Risk
Build-time dependency resolution only; no app runtime or business logic changes, though forced versions could affect Gradle/AGP compatibility if upstream APIs diverge.

Overview
Adds Gradle dependency resolution overrides in the root build.gradle so vulnerable transitive build-tooling libraries are upgraded without bumping AGP, Dokka, bundletool, or jetifier directly.

Centralizes patched version constants (Jackson, Netty, protobuf, jose4j, jdom2) and an applyTransitiveSecurityOverrides helper, then applies it on buildscript classpath and all project configurations via eachDependency plus explicit force on key Netty modules and protobuf-kotlin.

^{Reviewed by Cursor Bugbot for commit 0755310. Configure here.}