Exclude log4j 1.x dependency

[pomadchin]

Right now we don't have an exclusion of the log4j 1.x dep from the codebase, but still use log4j 2 -> 1 bridge implying that log4j is excluded by clients, i.e. that's how it is done in RasterFrames.

This task is to exclude log4j from libraries that can potentially bring it in and can make the assembly build process harder.