Update Googe Guava version. Put version into top POM.

The dependency in jena-shaded-guava doesn't seem to be picked up by dependabot (or the dependency check is off - there have been times when guava release frequently).

This ticket:

• updates the Guava version
• makes it a property and puts the property into the top POM