fix(security): upgrade jackson-databind 2.17.2 -> 2.18.9 to resolve Dependabot alerts #8-12

- CVE: PolymorphicTypeValidator bypass (HIGH)
- CVE: array subtype allowlist bypass (HIGH)
- CVE: InetSocketAddress SSRF (MEDIUM)
- CVE: @JsonIgnore on Record bypass (MEDIUM)
- CVE: case-insensitive deserialization bypass (MEDIUM)
- Also: set okhttp3-extension to release version 2.0.x.20260730

Author: loong10k

pom.xml

@@ -61,12 +61,12 @@
         <!-- Dependency versions -->
         <commons-exec.version>1.4.0</commons-exec.version>
         <commons-lang.version>2.6</commons-lang.version>
-        <jackson.version>2.17.2</jackson.version>
+        <jackson.version>2.18.9</jackson.version>
         <junit-jupiter.version>6.1.0</junit-jupiter.version>
         <junit.version>4.13.2</junit.version>
         <lombok.version>1.18.46</lombok.version>
         <okhttp.version>5.4.0</okhttp.version>
-        <okhttp3-extension.version>2.0.x.20260730-SNAPSHOT</okhttp3-extension.version>
+        <okhttp3-extension.version>2.0.x.20260730</okhttp3-extension.version>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <slf4j.version>2.0.18</slf4j.version>
         <!-- Maven Plugin versions -->