security: upgrade nimbus-jose-jwt to 9.37.4 (patched version)

- Update from 9.37.2 to 9.37.4 to address CVE
- 9.37.2 is vulnerable, 9.37.4 is the patched version for 9.x line
- Verified with mvn dependency:tree that override is applied

test/java/spark/pom.xml

@@ -167,7 +167,7 @@
             <dependency>
                 <groupId>com.nimbusds</groupId>
                 <artifactId>nimbus-jose-jwt</artifactId>
-                <version>9.37.2</version>
+                <version>9.37.4</version>
             </dependency>
 
             <!-- Snappy Java - Fix CVEs -->