wavefront-proxy: bump netty-bom and netty-codec-http

With the 4.1.108.Final version of netty-codec-http,
attempt to run wavefront-proxy would fail with a stacktrace like:

Bumping those makes the stacktrace go away.

Exception in thread "main" java.lang.NoClassDefFoundError: io/netty/handler/codec/http/cors/CorsConfig
    at java.base/java.lang.Class.getDeclaredMethods0(Native Method)
    at java.base/java.lang.Class.privateGetDeclaredMethods(Class.java:3166)
    at java.base/java.lang.Class.getDeclaredMethod(Class.java:2473)
    at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:47)
    at org.springframework.boot.loader.Launcher.launch(Launcher.java:108)
    at org.springframework.boot.loader.Launcher.launch(Launcher.java:58)
    at org.springframework.boot.loader.JarLauncher.main(JarLauncher.java:65)

wavefront-proxy.yaml

@@ -1,7 +1,7 @@
 package:
   name: wavefront-proxy
   version: "13.4" # When version is bumped, check if patches are still needed to address CVE-2023-1428
-  epoch: 4
+  epoch: 5
   description: Wavefront Proxy Project
   copyright:
     - license: Apache-2.0

wavefront-proxy/proxy/pombump-deps.yaml

@@ -14,12 +14,12 @@ patches:
   # Fixes GHSA-5jpm-x58v-624v
   - groupId: io.netty
     artifactId: netty-bom
-    version: 4.1.108.Final
+    version: 4.1.109.Final
     scope: import
     type: jar
   - groupId: io.netty
     artifactId: netty-codec-http
-    version: 4.1.108.Final
+    version: 4.1.109.Final
     scope: import
     type: jar
   - groupId: com.squareup.okio