Publish artifacts to Maven Central (e.g. spdx-utils)

[vlsi]

spdx-utils looks like a Java API, however, it is not really accessible via regular repositories like Sonatype OSSRH.

[sschuberth]

Strongly relates to #1901. @tsteenbe @mnonnenmacher do you see any (legal or otherwise) issues with publishing ORT libraries to Maven Central, now that we've moved the package namespace to org.ossreviewtoolkit and are a Linux Foundation project?

[mnonnenmacher]

No, I would very much appreciate if we started publishing to Maven Central.

[tsteenbe]

Yes, I think we need to have a brief TSC slack chat / call to decided on the version number for our first ORT release.

[sschuberth]

For the record, the org.ossreviewtoolkit project namespace on OSSRH / Maven Central has long been created.

[sschuberth]

Version 1.0.0 artifacts of ORT have been published to Maven Central today, see e.g. https://repo1.maven.org/maven2/org/ossreviewtoolkit/utils/spdx-utils/.