Use lenient semantic version comparator for JVM package repos

Created by: olafurpg

Previously, we used an external Go package to compare semantic versions. This package occasionally panicked on versions like 1.2.3.Final, which are valid Java package versions. Now, we compare the versions using a custom comparator that never panics.