OCI ADM vulnerability audit fixes

[sdedic]

During testing, I've found some subtle bugs including bad synchronization. The main changes are:

• changed wording of the audit diagnostic: if the vulnerable dependency is indirect, the message indicates the direct dependency that brought the vulnerability into the project
• audit request has an option to disable the local cache

There's a very light bug in Gradle dependencies implementation: the valid flag was not set up at the start;

Unrelated features, but possibly important for integration testing:

• NBLS command that gets diagnostic for a given file. It's not much possible to hook on LSP diagnostic stream on LSP client side.
• NBLS command that informs about directories the server uses; useful for on-disk settings inspection

[sdedic]

// cc: Laszlo, very minor change in Gradle.

[mbien]

fyi: micronaut and lsp tests are not working atm since the gradle wrapper which is used to setup test projects is downloading gradle 8.4, which breaks things.

unfortunately there is no such thing as global gradle wrapper properties, so there seems to be no quick fix i can do in CI.

I will take another look this evening, please avoid to merge to master until master is green again if possible.

[mbien]

please see #6673 for micronaut/lsp test issues