Shade plugin dependencies instead of bundling jar files

[gtoison]

SonarQube will deprecate the jar-in-jar dependencies, see https://community.sonarsource.com/t/custom-rules-101-update-for-sonarqube-latest-9-5-0/68347/3