Add a Maven bill of materials (aka bom)

Flogger dependency management could be made easier and less error prone with a [maven Bill of Materials](https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html#bill-of-materials-bom-poms)