fix: Pin Maven 3.9.16 so Central accepts the release bundle (#132)

Maven 3.10.0 makes central-publishing-maven-plugin 0.11.0 stage
_remote.repositories and maven-metadata-local.xml into the bundle, which
Central rejects. Revert the wrapper to 3.9.16 and have dependabot ignore
apache-maven >= 3.10.0.

Author: thced

.github/dependabot.yml

@@ -8,6 +8,12 @@ updates:
       java:
         patterns:
           - "*"
+    ignore:
+      # Maven 3.10 stages _remote.repositories and maven-metadata-local.xml into the
+      # Central bundle, which Central rejects. Revisit once central-publishing-maven-plugin
+      # (0.11.0) supports it.
+      - dependency-name: "org.apache.maven:apache-maven"
+        versions: [">= 3.10.0"]
 
   - package-ecosystem: github-actions
     directory: '/'

.mvn/wrapper/maven-wrapper.properties

@@ -1,3 +1,3 @@
 wrapperVersion=3.3.4
 distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.10.0/apache-maven-3.10.0-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.16/apache-maven-3.9.16-bin.zip