[MNG-8408] Provide a simple way to lock plugins

**[Guillaume Nodet](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=gnt)** opened **[MNG-8408](https://issues.apache.org/jira/browse/MNG-8408?redirect=false)** and commented

Maven warns if stock plugins do not have a version specified.
We need to provide a simple way to lock those plugins and point users to it in the warning.

A quick way would be to provide a simple mojo in https://github.com/maveniverse/toolbox to get the latest of each plugin which is not locked and add those to the plugin management section of the root pom.

---
No further details from [MNG-8408](https://issues.apache.org/jira/browse/MNG-8408?redirect=false)