Phoenix-connectors should not depend on log4j:log4j

Apache phoenix-connectors has log4j:log4j:1.2.17 as direct dependency (See https://github.com/apache/phoenix-connectors/blob/master/pom.xml#L830), which is vulnerable: https://security.snyk.io/package/maven/log4j:log4j/1.2.17

In my org, this dependency is not even allowed to be downloaded and hence I can't even build the code in it's current state.

With this ticket I plan to completely remove it from the project.

CC: stoty