Add exclusions for org.picketbox

The productized version of org.picketbox includes some libraries that must be explicitly excluded from core.

Although those libraries are not included by the community version, it is harmless if we add those exclusions directly in the upstream project, instead of adding the exclusions on each product conversion.

An alternative could be to use an eap-ization commit for this task, but these exclusions in the upstream will minimize the required stuff for the wf-to-cd branches.