Add back static code analysis plugin

[wslulciuc]

PR https://github.com/MarquezProject/marquez/pull/1055 removed the spotbugs plugin. The plugin was removed as the CI build failed when bugs in the codebase were found. The OpenSSF Best Practices badge requires that we have some static code analysis tool in place, so this issue is to ensure the plugin is added back.

Note, when adding the spotbugs plugin, the PR should also address all errors and warnings to avoid polluting the logs and breaking CI.

[merobi-hub]

@wslulciuc Through the process of adding a static code analysis tool to OpenLineage, we learned that PMD is a better option than the dormant Spotbugs project. Consequently, Spotbugs has now been replaced by PMD in #2011 . The configuration is the same as in OpenLineage.

[merobi-hub]

Took the liberty of editing the title to reflect the new tool.