[java] Prevent byte-buddy -jdkN variant from being picked by dependency updates (#17523)

Add a guard in the java:update Rake task that detects net.bytebuddy:*
artifacts whose proposed version carries a -jdkN suffix and falls back
to the latest stable release returned by maven_stable_release (which
already filters to versions matching `\A\d+\.\d+(\.\d+)*\z`).

Also revert MODULE.bazel and re-pin maven_install.json so the current
state is consistent again.

Fixes #17355

Signed-off-by: Pierluigi Lenoci <pierluigi.lenoci@gmail.com>