[QUARKUS-8371] pin cloudevents to 4.1.1 across all modules

[jankrystof-ibm]

Description

JIRA ticket: https://redhat.atlassian.net/browse/QUARKUS-8371

pin cloudevents to 4.1.1 across all modules

Changes

• add cloudevents-core and cloudevents-json-jackson version pins to bom/pom.xml
• add cloudevents-core pin to root pom.xml (for core/messaging modules)
• import quarkus-flow-bom in all example modules so BOM pins take effect

Testing

maven build including tests

Test Plan

N/A

Manual Testing

N/A

Checklist

Before submitting this PR, please ensure:

• I ran the full build with integration tests locally: ./mvnw clean install -DskipITs=false
• n/a Code follows the project's code conventions
• n/a Tests have been added/updated to cover the changes
• n/a Documentation has been updated (if user-facing changes)
• Commit messages are clear and follow conventional commits style
• I have read and followed the Contributing Guide
• I have read and comply with the LLM Usage Policy (if applicable)

Additional Notes

n/a

[ricardozanini]

Thanks for this, a couple of things:

1. The Serverless Workflow SDK is maitained by the same maintainers as Quarkus Flow. Please upgrade the CE SDK there. I'm surprised dependabot hasn't pushed the update there.
2. If you are adding the Quarkus Flow BOM to the examples, we should also remove the <version> tag from the quarkus-flow dependencies too. I don't see any why duplicating then.
3. We are forcing the version because in main branch, we want our examples to run against SNAPSHOT/local build.