Missing executable bits in source release tarball

symat noticed that the source tarball for 3.7.0rc0 is missing executable bits.

ztzg noticed that this can be worked around by reinstating the "old" version of the maven-assembly-plugin, which had been aligned in ZOOKEEPER-3833.

This ticket will concentrate on the temporary workaround, so that 3.7.0 can be released.