[loong10k]

Changes

• Upgrade FreeMarker to 2.3.35, jsoup to 1.23.2, and OGNL to 3.4.13, covering Dependabot PRs build(deps): bump org.freemarker:freemarker from 2.3.34 to 2.3.35 #5, build(deps): bump org.jsoup:jsoup from 1.23.1 to 1.23.2 #6, and build(deps): bump ognl:ognl from 3.4.2 to 3.4.13 #7.
• Run main CI with JDK 21 and the pinned Maven 4 wrapper required by the POM.
• Upload test and coverage artifacts from all reactor modules.

Verification

• ./mvnw -B --no-transfer-progress clean verify passed locally with Maven 4.0.0-rc-6 and JDK 21.
• Surefire XML: 1,462 tests, 0 failures, 0 errors, 5 skipped.
• JaCoCo checks passed for every code module; lowest module line coverage was 92.19%.
• Dependency tree resolves FreeMarker 2.3.35, jsoup 1.23.2, and OGNL 3.4.13.

Draft for CI and review. The existing Dependabot PRs are left open until this combined change is accepted.