[deps] Fixing Dep Resolution and Including Lockfile for All Subprojects

[onelapahead]

I found sometimes:

./gradlew spotlessApply --write-verification-metadata sha256

wasn't resolving all dependencies bc of how the build graph gets made for that command, so the bouncycastle module SHA wasn't included in the metadata file causing our internal Docker builds of Besu to fail.

So instead:

./gradlew :crypto:algorithms:compileJava --write-verification-metadata sha256

worked and downloaded the missing verifications. Going forward, we likely want to recommend to our devs to do:

 ./gradlew clean spotlessApply compileJava --write-verification-metadata sha256

in order to update the verification metadata.

Similarly, I found if I did:

 ./gradlew clean dependencies --write-verification-metadata sha256 --write-locks

It then generated the lockfiles for all the subprojects within Besu, which is likely what we want. Though its likely a lot more to maintain and use for SBOM generation.

[matthew1001]

Hopefully future PRs will just be small diffs on these new files :)