Upgrade to CXF 4.x

With the Pax Web 11 / Jetty 12 upgrade (see #2067), CXF 4.x is required to support jakarta namespace.