#230 build(oracle): signed Jackson 2.22.3 patch bump

Signed Jackson patch update for pinned HL7 Oracle wrapper

Forward signed+DCO replacement of unsigned historical PR #186.

• Only tools/hl7-oracle/pom.xml changed: Jackson property
  2.22.1 -> 2.22.3.
• No change to HL7 validator 6.10.2 source/release pin,
  UCUM, Java release 17 or other dependencies.
• Mac local POM checked for valid XML and exact isolated
  property replacement. Maven CLI was NOT AVAILABLE on
  the authorized Mac, so Java compile/runtime tests
  are explicitly NOT_RUN locally.
• Current exact-head GitHub CI, including oracle-self-smoke
  and changed-profile, strict Rust, AF-02 base verifier,
  dependency checks, assurance-proof and scorecard must
  complete genuinely GREEN before a guarded merge.
• No claim that a changed Jackson version automatically
  fixes all vulnerabilities or changes clinical reliability.
• Original unsigned PR #186 remains historically visible
  but must not be merged or rewritten.

---

Summary by cubic

Bumps the Jackson dependency in tools/hl7-oracle/pom.xml from 2.22.1 to 2.22.3. This is the signed, DCO-compliant replacement of the unsigned PR #186, applied directly on current main.

Only the jackson.version Maven property changes; the HL7 validator 6.10.2 pin, UCUM, Java release 17, and all other dependencies stay the same. Maven wasn't available on the authorized Mac, so no local Java tests were run — exact-head CI, including oracle-self-smoke, must pass green before merge. No claim that Jackson 2.22.3 fixes all known vulnerabilities or changes clinical reliability.