[Bug] Reproducible Builds issues on 4.1.0 release

### Search before reporting

- [x] I searched in the [issues](https://github.com/apache/pulsar/issues) and found nothing similar.

### Read release policy

- [x] I understand that [unsupported versions](https://pulsar.apache.org/contribute/release-policy/#supported-versions) don't get bug fixes. I will attempt to reproduce the issue on a supported version of Pulsar client and Pulsar broker.

### User environment

see https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/pulsar/README.md

### Issue Description

I already annotated diff https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/pulsar/pulsar-4.1.0.diffoscope

if project is interested, I can later try to fix a few issues and discuss what I can't "just fix" myself but requires updates in project release process or features

### Error messages

```text

```

### Reproducing the issue

from https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/content/org/apache/pulsar/README.md

`./rebuild.sh content/org/apache/pulsar/pulsar-4.1.0.buildspec`

### Additional information

provided #23639 in the past, that seems to still hit 4.1.0 release

### Are you willing to submit a PR?

- [x] I'm willing to submit a PR!

Start with content/org/apache/pulsar/README.md and content/org/apache/pulsar/pulsar-4.1.0.buildspec, then run ./rebuild.sh content/org/apache/pulsar/pulsar-4.1.0.buildspec. Review the annotated content/org/apache/pulsar/pulsar-4.1.0.diffoscope and compare it with the prior issue #23639. Done means the reproducible-build differences are addressed or their required release-process changes are documented.

Written by the indexing model from the issue text.