Upgrade commons-lang to version 3.18.0

### Check Ahead

- [ ] I have searched the [issues](https://github.com/seata/seata/issues) of this repository and believe that this is not a duplicate.

- [x] I am willing to try to implement this feature myself.

### Why you need it?

CVE-2025-48924
Apache Commons Lang中存在未控制的递归漏洞。此问题影响Apache Commons Lang：从commons-lang:commons-lang 2.0到2.6版本，以及org.apache.commons:commons-lang3的3.0版本之前至3.18.0版本。ClassUtils.getClass(...)方法在处理非常长的输入时可能会抛出StackOverflowError。由于应用程序和库通常不会处理Error，因此StackOverflowError可能会导致应用程序停止运行。建议用户升级到版本3.18.0，该版本已修复此问题。

受影响的版本
- Apache Commons Lang (commons-lang:commons-lang) 2.0 through 2.6
- Apache Commons Lang (org.apache.commons:commons-lang3) 3.0 before 3.18.0

Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a StackOverflowError could cause an application to stop. Users are recommended to upgrade to version 3.18.0, which fixes the issue.

Affected versions:
- Apache Commons Lang (commons-lang:commons-lang) 2.0 through 2.6
- Apache Commons Lang (org.apache.commons:commons-lang3) 3.0 before 3.18.0

### How it could be?

upgrade commons-lang 2.6 to commons-lang3 3.18.0

### Other related information

_No response_

Locate the build dependency declarations for commons-lang and check where the 2.6 artifact is referenced. Review the Commons Lang 3.18.0 migration impact, run the relevant Java test suite, and consider the work done when the old dependency is replaced without regressions and dependency checks no longer report CVE-2025-48924.

Written by the indexing model from the issue text.