fix: use maven-dependency-plugin@3.9.0 for verbose

This brings in an update to the version of the maven-dependency-plugin
that's executed when using -Dverbose or when resolving metaversions.

We will now use the latest version (3.9.0) when the version of Maven
supports it (3.6.3+).

See snyk/snyk-mvn-plugin#210

Author: gitphill

package-lock.json

@@ -121,7 +121,7 @@
     "snyk-go-plugin": "1.23.0",
     "snyk-gradle-plugin": "5.1.1",
     "snyk-module": "3.1.0",
-    "snyk-mvn-plugin": "4.3.3",
+    "snyk-mvn-plugin": "4.5.1",
     "snyk-nodejs-lockfile-parser": "2.4.5",
     "snyk-nodejs-plugin": "1.4.5",
     "snyk-nuget-plugin": "4.0.0",