Upgrade lz4-java to 1.11.4

[vharseko]

Upgrades at.yawk.lz4:lz4-java in cassandra-embedded from 1.11.1 to 1.11.4, which resolves the open Dependabot alerts:

Alert	Severity	Advisory	Fixed in
#116	high	GHSA-mcr4-qmvw-px4g – native library extracted to a shared temp directory can be replaced by another local user	1.11.4
#114	medium	GHSA-gm45-99xc-r7wv – LZ4FrameInputStream reallocates block buffers per frame (CPU/GC amplification)	1.11.4
#113	medium	GHSA-4v53-57pg-c464 – LZ4BlockInputStream allocates an unvalidated compressed length	1.11.2
#112	medium	GHSA-6cx8-rjf8-pr8g – LZ4DecompressorWithLength allocates an unvalidated size (5-byte input → 1 GiB)	1.11.2
#115	low	GHSA-343h-94h5-c4wr – LZ4BlockInputStream recursion on empty blocks → StackOverflowError	1.11.4

1.11.4 is the minimal patch release covering all five advisories; 1.12.0 was intentionally not taken.

Testing

• mvn -pl cassandra-embedded dependency:tree resolves at.yawk.lz4:lz4-java:jar:1.11.4.
• EmbeddedServerTest passes on JDK 17 (the module skips tests on JDK 18+); the embedded Cassandra classpath contains lz4-java-1.11.4.jar.