Replace the ESAPI version range with a deterministic, tested dependency policy

Follow-up to #90 (reviewed at 31588e1). This tracks work intentionally kept separate from the modernization PR.

Problem and evidence

esapi/pom.xml declares org.owasp.esapi:esapi:[2.5.1.0,3). During the review this resolved to 2.7.0.1-RC1, meaning a fresh build can select a prerelease without any repository change. The range is also part of the published consumer POM.

Related historical failures from changing ESAPI APIs or resolution: #31, #63, and #74. This issue is not a claim that the currently resolved release is vulnerable.

Acceptance criteria

• Select and document a supported, fixed stable ESAPI baseline; retain a deliberate override mechanism if needed.
• Document the supported ESAPI compatibility range separately from Maven's dependency selection.
• Add build/runtime tests for the selected baseline and any other versions claimed as supported, including delegated adapter methods.
• Validate dependency convergence and the security/runtime implications of the transitive graph; preserve compatibility claims or explicitly document any necessary change.
• Confirm fresh-cache builds select the same intended stable dependency.
• Verify the generated/published POM does not retain an unintended open-ended range or prerelease selection.
• Coordinate the chosen dependency/module identity with the separate JPMS adapter issue.

Limit changes to the ESAPI adapter and its tests/documentation; do not add ESAPI dependencies to the core encoder.

Comienza con esapi/pom.xml y las pruebas del adaptador de ESAPI; después revisa #90 y las issues históricas #31, #63 y #74. Define la línea base estable fija, las afirmaciones de compatibilidad y el mecanismo de override antes de cambiar el alcance del adaptador. Se considera terminado cuando las pruebas cubren las versiones declaradas y las compilaciones con la caché vacía y los POMs publicados seleccionan la misma dependencia estable prevista, sin un rango ni una versión prerelease no intencionados.