Bump Bouncy Castle to 1.84

Clears CVE-2026-5598 (HIGH covert timing channel) and CVE-2026-0636
(MEDIUM LDAP injection). Reactor compiles clean across all 6 modules.

Supersedes Dependabot PR #435.

Author: mondain

pom.xml

@@ -102,7 +102,7 @@
         <red5-moq-pkgr.version>[1.3.9,)</red5-moq-pkgr.version>
         <slf4j.version>2.0.17</slf4j.version>
         <logback.version>1.5.18</logback.version>
-        <bc.version>1.83</bc.version>
+        <bc.version>1.84</bc.version>
         <mina.version>2.0.27</mina.version>
         <spring.version>6.2.17</spring.version>
         <tomcat.version>11.0.15</tomcat.version>