Upgrade Log4j to 2.25.2

[ppkarwasz]

This PR updates all Log4j artifacts to version 2.25.1 and includes a few related cleanups:

• Supersedes Update apache.log4j to v2.25.2 #3079.

• Removes explicit dependencies on osgi.annotation and biz.aQute.bnd.annotation.

  • Since Log4j 2.25.0, Gradle Module Metadata automatically adds these as transitive compile-only dependencies, so declaring them directly is no longer needed.
  • This still avoids -Xlint:classfile compiler warnings without extra dependencies.

• Excludes spotbugs-annotations (brought in transitively via Apache POI).

  • It is not required for the build and causes license check failures, because SpotBugs (and its annotations) are LGPL-2.1 licensed.

Checklist

Please review the following and check all that apply:

• I have reviewed the guidelines for How to Contribute and my code conforms to the standards described there to the best of my ability.
• I have created a Jira issue and added the issue ID to my pull request title.
• I have given Solr maintainers access to contribute to my PR branch. (optional but recommended, not available for branches on forks living under an organisation)
• I have developed this patch against the main branch.
• I have run ./gradlew check.
• I have added tests for my changes.
• I have added documentation for the Reference Guide

[janhoy]

Quick view, looks great, thanks for diving in. Note that when the PR is not authored by solrbot, it will not be auto included in CHANGES.txt "Dependency upgrades" section, so you'll have to add a line there yourself.

[risdenk]

FYI #2895 was another attempt prior to this. There was a comment about licenses needing to be reviewed as well. #2895

[ppkarwasz]

I switched this PR to draft, since we have scheduled a release 2.25.2 for next Monday, so I see no reason to upgrade twice.

[ppkarwasz]

We released version 2.25.2 (the last of the 2.25.x series) yesterday. I updated the PR to the new version.