[Bug] Upgrade Netty to remediate CVEs

### Before Creating the Bug Report

- [x] I found a bug, not just asking a question, which should be created in [GitHub Discussions](https://github.com/apache/rocketmq/discussions).

- [x] I have searched the [GitHub Issues](https://github.com/apache/rocketmq/issues) and [GitHub Discussions](https://github.com/apache/rocketmq/discussions) of this repository and believe that this is not a duplicate.

- [x] I have confirmed that this bug belongs to the current repository, not other repositories of RocketMQ.

### Runtime platform environment

All

### RocketMQ version

develop

### JDK Version

8

### Describe the Bug

Upgraded Netty to 4.1.130.Final to remediate CVE-2025-55163, CVE-2025-59419, CVE-2025-58057, CVE-2025-67735 and CVE-2025-58056

### Steps to Reproduce

N/A

### What Did You Expect to See?

N/A

### What Did You See Instead?

N/A

### Additional Context

_No response_

No file, test, or entry point is named. Start by locating RocketMQ's dependency declarations and checking how Netty is managed, then verify that the version is 4.1.130.Final and that the listed CVEs are addressed without breaking the existing Java 8 build and tests.

Written by the indexing model from the issue text.