Remove spring-security-bom in dependencyManagement

spring-security-bom it provides dependency management for itself. This
commit avoids adding it to the dependency management section.

Fixes gh-4878

bom/spring-security-bom.gradle

@@ -5,6 +5,8 @@ sonarqube.skipProject = true
 
 project.rootProject.allprojects.each { p ->
 	p.plugins.withType(io.spring.gradle.convention.SpringMavenPlugin) {
+		if (!project.name.equals(p.name)) {
 			project.mavenBom.projects.add(p)
 		}
 	}
+}