build: Bump jackson-databind from 2.21.2 to 2.21.4

[mc-nv]

What does the PR do?

Bumps com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.4 in the Java client. The 26.07 SDK container security scan (Pulse) flags two HIGH advisories against jackson-databind bundled into the Java example fat-JARs (SimpleInferClient.jar, SimpleInferPerf.jar, MemoryGrowthTest.jar):

• GHSA-j3rv-43j4-c7qm (fixed in 2.21.4)
• GHSA-rmj7-2vxq-3g9f (fixed in 2.21.4)

Related Issues / PRs

• Related: TRI-1593
• Backport of the same bump to r26.07: build: Bump jackson-databind from 2.21.2 to 2.21.4 #910

Test plan

• One-line dependency version bump; examples are rebuilt by the SDK container build.
• Verification: for 26.07: rebuild the SDK container and re-run the scan-container:py3-sdk security job, which currently fails on these two advisories (internal pipeline 58029553, job 365259903).

Caveats

The remaining findings in the scan report (Go stdlib CVEs in the CUDA Nsight Systems nic_sampler plugin) are third-party toolkit content covered by a temporary GlobalVEX and are not addressable in this repo.

Checklist

• PR title follows <commit_type>: <Title> (conventional commit — enforced by the conventional-pre-commit hook)
• I ran pre-commit install && pre-commit run --all-files locally and it passes
• Copyright header is correct on all changed files
• External contributors: I have read the Contribution guidelines and signed the Contributor License Agreement

[mc-nv]

Superseded by #908, which already includes this jackson-databind bump on main alongside the broader gRPC v1.81.1 dependency alignment. The r26.07 backport continues in #910.