[improve][build] Upgrade Bouncy Castle libraries - #26753

Motivation

Update the Bouncy Castle libraries used for TLS and cryptography to the available stable releases, including the FIPS test dependencies.

Modifications

Give TLS its own version pin because its 1.86.1 patch was not published for PKIX or the provider. Keep the current bc-fips provider at 2.1.3. Update the server and shell binary-license inventories to match the bundled jars.

Verifying this change

• Make sure that the change passes the CI checks.

Existing tests cover this change. Local validation passed:

• ./gradlew help assemble sanityCheck checkBinaryLicense --configuration-cache --console=plain (sanityCheck includes Checkstyle and Spotless).
• 31 tests across JcaProvidersTest, JcaProviderPinningTest, and JdkSslContextsTest in pulsar-common.
• All 3 TlsProducerConsumerTest tests in tests/pulsar-client-test-bcfips.

The focused tests ran with -PtestRetryCount=0, with no failures or skips.

Does this pull request potentially affect one of the following parts:

• Dependencies (add or upgrade a dependency)
• The public API
• The schema
• The default values of configurations
• The threading model
• The binary protocol
• The REST endpoints
• The admin CLI options
• The metrics
• Anything that affects deployment