Fix some dependency issues

[HTHou]

Description

In this PR,

1. Fix CVE-2024-31033 by upgrading jjwt to 0.12.7.
2. Fix CVE-2025-8916 by upgrading bouncycastle to 1.81.
3. Fix CVE-2025-53864 by upgrading gson to 2.13.1.
4. Remove the replaceable usage of bouncycastle in ClientRPCServiceImpl.java
5. Remove the redundent netty version declaration in the metrics interface pom.
6. Update License and Notice.

[codecov]

Codecov Report

❌ Patch coverage is 83.33333% with 1 line in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (master@ec47d0a). Learn more about missing BASE report.
⚠️ Report is 8 commits behind head on master.

Files with missing lines	Patch %	Lines
.../db/protocol/thrift/impl/ClientRPCServiceImpl.java	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff            @@
##             master   #16198   +/-   ##
=========================================
  Coverage          ?   38.95%           
  Complexity        ?      198           
=========================================
  Files             ?     4880           
  Lines             ?   319009           
  Branches          ?    40263           
=========================================
  Hits              ?   124267           
  Misses            ?   194742           
  Partials          ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[JackieTien97]

using com.google.common.base.Preconditions.checkArgument instead of gson

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud