[Bug] Okio version in Clickhouse jdbc has a vulnerability CVE-2023-3635

### Search before asking

- [X] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.

### Version

For pulsar version: `3.1.2` on branch: `branch-3.1` facing moderate vulnerability [CVE-2023-3635](https://github.com/advisories/GHSA-w33c-445m-f8w7), related to packages:
- com.squareup.okio:okio
- com.squareup.okio:okio-jvm
- com.clickhouse:clickhouse-jdbc

Below is the versions available in pulsar -
- 1.17.2
- 0.4.6

Maven Dependency

- pulsar - org.apache.pulsar 3.1.2

### Minimal reproduce step

Run Pulsar CI workflow on pulsar branch - `branch-3.1`

### What did you expect to see?

Expected to pass the `OWASP dependency check` under `Pulsar CI` workflow.

### What did you see instead?

Vulnerability
```
Error: Failed to execute goal org.owasp:dependency-check-maven:8.2.1:aggregate (default) on project pulsar:
Error:
Error: One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
Error:
Error: clickhouse-jdbc-0.4.6-all.jar/META-INF/maven/com.squareup.okio/okio/pom.xml: CVE-2023-3635(7.5)
```

### Anything else?

_No response_

### Are you willing to submit a PR?

- [ ] I'm willing to submit a PR!

Inspect the Maven dependency declarations for okio and clickhouse-jdbc on branch-3.1, then run the Pulsar CI workflow or its OWASP dependency check. Done means the ClickHouse JDBC dependency no longer brings in the vulnerable Okio version and the dependency check passes.

Written by the indexing model from the issue text.