GH-5050: add netty dependency management to fix CVEs (#5051)Signed-off-by: Bart Hanssens <bart.hanssens@bosa.fgov.be> (commit: e0e9868)