* Add a master pom.xml as an entrypoint for dependabot

* Add vulnerable log4j dependency to test dependabot

* Fix pom generation

* Moved bom files to make dependabot recognize them

* Remove dependencies from root pom.xml

* Add local poms as modules, not dependencies

* Revert "Moved bom files to make dependabot recognize them"

This reverts commit 1742e08ed2.

* Revert "Revert "Moved bom files to make dependabot recognize them""

This reverts commit 1f17702f9b.

* Make generate_master_pom.sh executable

* Update README

* Revert "Add vulnerable log4j dependency to test dependabot"

This reverts commit 7d45af18af.

Changes:
- There is one unified docker-compose.yml for both repo and sync
- Both containers are started together, but the maven container spins
until the repo is ready
- The repo is terminated when maven terminates
- The repo is set up at port 80 in the container, 9001 on the host
- The maven container is separated from the host network, only has
connections to the repo