chore: land green Dependabot bumps with Jackson alignment

[JeffTax]

Summary

• Lands the already-green Dependabot upgrades in one PR: actions/checkout v7, actions/setup-java v6, codeql-action v4, maven-surefire-plugin 3.6.0, wiremock-standalone 3.0.1, Jackson 2.22.x.
• Fixes the failing Jackson databind bump (build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.22.2 #3): bumping only jackson-databind to 2.22.2 leaves parent-managed jackson-annotations at 2.13.x, which lacks JsonSerializeAs and breaks tests. This PR aligns jackson-annotations (2.22), jackson-core, and jackson-databind together.
• Does not bump killbill-oss-parent to 0.147.x (Bump org.kill-bill.billing:killbill-oss-parent from 0.146.87 to 0.147.21 #7). That parent drops managed versions for javax.inject / org.jooby:jooby and is part of the Jakarta / JDK 21 migration across Kill Bill — needs a dedicated migration PR, not Dependabot.

Supersedes

• build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.22.2 #3 (jackson-databind alone — red)
• Bump actions/checkout from 2 to 7 #4 (checkout)
• Bump actions/setup-java from 1 to 6 #5 (setup-java)
• build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.22.2 #6 (jackson-core)
• build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.6.0 #8 (surefire)
• build(deps-dev): bump com.github.tomakehurst:wiremock-standalone from 2.27.2 to 3.0.1 #9 (wiremock)
• build(deps): bump github/codeql-action from 3 to 4 #10 (codeql-action)

Not included

• Bump org.kill-bill.billing:killbill-oss-parent from 0.146.87 to 0.147.21 #7 (killbill-oss-parent 0.147.21) — recommend closing; track as a Jakarta migration.

Tests

• JAVA_HOME=…/openjdk@11 mvn -B -ntp test — 54 tests, 0 failures.

[JeffTax]

@reshmabidikar — JeffTax only has pull access on this repo, so I can't merge/close the Dependabot PRs or push directly.

Could you:

1. Review + merge this PR when CI is green
2. Close Dependabot build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.18.6 to 2.22.2 #3–build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.22.2 #6 and build(deps-dev): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.6.0 #8–build(deps): bump github/codeql-action from 3 to 4 #10 as superseded
3. Close Bump org.kill-bill.billing:killbill-oss-parent from 0.146.87 to 0.147.21 #7 (oss-parent 0.147) as not a drop-in bump — needs a Jakarta/JDK 21 migration
4. Optionally add JeffTax as a collaborator with write so we can land follow-ups without pinging you

Local verification: JDK 11, `mvn -B -ntp test` — 54/54 green.

[JeffTax]

Superseded — Dependabot fixes landed on #13 instead.