Vulnerability Scan Review - hibernate core being found

### Issue description

We exempted hibernate-core but hibernate-core should not be on the classpath. Need to find out where this is coming from and remove it so the vulnerability exemption isn't needed.

Trace the Grails dependency and classpath configuration to determine where hibernate-core is introduced; the issue does not name a file, test, or entry point. Verify the dependency is absent from the classpath and that the vulnerability exemption can be removed without breaking the build.

Written by the indexing model from the issue text.