security/dogtag-pki: Fix incomplete javac classpath

base/tomcat-9.0 compiles against pki-common, whose classes carry
@JsonInclude, but does not list jackson-annotations, so javac cannot
resolve the annotation. Every other subproject already lists the jar.

Sponsored by: Netzkommune GmbH