Repin required after `bazel clean` when using maven boms with coursier

[neckbosov]

how to reproduce:

1. Create project with rules_jvm_external 6.7.
2. Add maven.install with maven bom (e.g "org.springframework.boot:spring-boot-dependencies:3.4.2")
3. Run REPIN=1 bazel run @maven//:pin and update lock file for maven.install.
4. Run bazel clean --expunge
5. Run bazel build //...

You will see error about unpinned artifact and advice to re-pin.

Cause:
Empty boms list passed here which causes discrepancies of hash calculations between fetch and pin.

[neckbosov]

Any reaction? @shs96c