feat: add maven dependency vulnerability scanning

Add vulnerability analysis for maven dependencies.

For each vulnerable dependency, report:
- group/artifact
- installed version
- vulnerability ID
- severity
- vulnerability summary
- fixed/first safe version
- affected modules

Support severity filtering and CI-friendly failure thresholds.

Examples:

    --vulnerable
    --severity high
    --fail-on critical