Maven artefact update includes valid URL in SCM, breaks integration test

[benmss]

The latest update to Maven artefacts, version 4.0.0-rc-3, now includes a URL in the SCM of the POM that can be parsed by the Repo Finder, resolving to https://github.com/apache/maven. The integration test apache_maven_sbom assumes that the dependencies of maven have no discoverable repository URL. This new version causes them to have one, because the sought version 4.0.0-alpha-1-SNAPSHOT does not have a POM, and the find latest PURL feature retrieves the newest instead, which now does.