Bump nokogiri, tika, remove explicit bouncycastle

[seanstory]

part of https://github.com/elastic/search-team/issues/7528

This bumps two outdated deps, and removes a known dependency misalginment between tika an an explicit bouncy-castle dep.

Checklists

Pre-Review Checklist

• [x] This PR does NOT contain credentials of any kind, such as API keys or username/passwords (double check crawler.yml.example and elasticsearch.yml.example)
• [x] This PR has a meaningful title
• [x] This PR links to all relevant GitHub issues that it fixes or partially addresses
  • If there is no GitHub issue, please create it. Each PR should have a link to an issue
• [x] this PR has a thorough description
• [ ] Covered the changes with automated tests
• [x] Tested the changes locally
• [x] Added a label for each target release version (example: v0.1.0)
• [x] Ran make notice if any dependencies have been added

[seanstory]

I hope not. 😰 This just makes the same change we made to ent-search after all the investigation and stress. Because this removes the explicit version constraint on bouncycastle, this lets the direct deps pick the right version for the transitive, so there shouldn't be any issue here.

It is suprirsing that without this change we didn't see any bugs. My guess is it's because we don't even need Tika in this project at all anymore. We need to do an audit and just remove the unused deps, so that we don't have to bother keeping them updated.