fix(deps): bump scram-client to 3.3

[jorsol]

Motivation:

Bump scram-client to version 3.3, it includes many improvements and security fixes.

Make explicit the ChannelBindingPolicy as ALLOW until it can be configured by the client.

Conformance:

You should have signed the Eclipse Contributor Agreement as explained in https://github.com/eclipse/vert.x/blob/master/CONTRIBUTING.md
Please also make sure you adhere to the code style guidelines: https://github.com/vert-x3/wiki/wiki/Vert.x-code-style-guidelines

[tsegismont]

Can you please sign the Eclipse ECA? Would you mind adding the option field to connect options while you're at it?

[tsegismont]

Ideally we'd also have a test that verifies it is not possible to connect if the user sets the REQUIRE policy for the client and the server does not explicitly advertise a channel-bound mechanism.