Include Couchbase jars & shadowed dependencies in BOM for Analytics BD scans

Currently the BOMs published by Analytics build process exclude Couchbase jars – this prevents shadowed third-party dependencies from being reported on the BD reports, which can hide security & licensing issues which may manifest in those dependencies.

In addition, Maven does not provide any metadata in the POM which indicates which dependencies are shadowed, so they are not included in the BOM. We need to explicitly map the shadowed (embedded) dependencies into our published BOM.