UID2-7364: Revert jackson-databind to 2.14.2 to avoid downstream breakage

The 2.19.0 upgrade broke other services consuming this shared jar.
CVE-2026-54512 / CVE-2026-54513 are suppressed via .trivyignore until
an upstream patch is released.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: sophia-chen-ttd

pom.xml

@@ -206,15 +206,10 @@
             <artifactId>cbor</artifactId>
             <version>0.9</version>
         </dependency>
-        <dependency>
-            <groupId>com.fasterxml.jackson.core</groupId>
-            <artifactId>jackson-core</artifactId>
-            <version>2.19.0</version>
-        </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.19.0</version>
+            <version>2.14.2</version>
         </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>