Gradle publish plugin not using BOM to specify versions

Gradle's (official) publish plugin does not seem to read BOMs when generating pom.xml.

```
> Task :publishPlugins FAILED
Caching disabled for task ':publishPlugins' because:
Build cache is disabled
Task ':publishPlugins' is not up-to-date because:
Task has not declared any outputs despite executing actions.
Could not resolve the version of: com.google.guava:guava
Use the following workaround to resolve this version for pom generation:
http://plugins.gradle.org/help/plugin/missing-dependency-version
:publishPlugins (Thread[Execution worker for ':',5,main]) completed. Took 0.103 secs.

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':publishPlugins'.
> No version found for com.google.guava:guava on pom generation.

* Try:
Run with --debug option to get more log output. Run with --scan to get full insights.

* Exception is:
org.gradle.api.tasks.TaskExecutionException: Execution failed for task ':publishPlugins'.
at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.lambda$executeIfValid$1(ExecuteActionsTaskExecuter.java:207)

```

Investigate how we can use BOM to publish the Gradle plugin.