chore(dependencies) fix issues raised by dependency:analyze

This PR runs cleans up used (but not declared, i.e., transitive) dependencies by explicitly
declaring it and removes declared (but not used, i.e., stale) dependencies by removing them.
In addition, adds `mvn dependency:analyze -DfailOnWarnings=true` to ensure dependencies are
always correct.

Junit Platform is a false-negative because it is handled via ServiceLoader. Our surefire
version makes it redundant (that's why tests remain running without it) but for safety, we
explicitly add it and use the dependency plugin to ignore it from analysis.