Fix: modularize (#269)

Modularize with overhauled dependencies.

Changes:
* added `module-info.java`
* deps updated (and also modularized)
* locked down the whole build
* Toolbox stats: https://gist.github.com/cstamas/4539094ce7be5327b0ca0b117211a600

From now on, to update _anything_ in the build (any plugin or dependency) one needs to maintain checksums as well: one can do it by using `-Daether.artifactResolver.postProcessor.trustedChecksums.record` user property in a trusted environment. Then immediately validating in some independent env (like CI is -- build should pass, otherwise trusted environment is compromised).

Author: cstamas