Add STS dependencies for web identity authentication

Package the AWS SDK v1 STS module and its required JMESPath dependency
in the aws-dynamodb-refdb plugin.

This makes the STS client available from the plugin classloader when
the DynamoDB client resolves credentials through a Web Identity Token.

Without these dependencies, the SDK cannot initialize
WebIdentityTokenCredentialsProvider and IRSA authentication fails.

Bug: Issue 529263606
Change-Id: Id4ddc8a46d1d55e353a9ec0fff16b85350a3198e

BUILD

diff --git a/BUILD b/BUILD
index f45d775..20bc796 100644
--- a/BUILD
+++ b/BUILD
@@ -25,11 +25,13 @@
         "@amazon-utils//jar",
         "@aws-java-sdk-core//jar",
         "@aws-java-sdk-dynamodb//jar",
+        "@aws-java-sdk-sts//jar",
         "@dynamodb-lock-client//jar",
         "@jackson-annotations//jar",
         "@jackson-core//jar",
         "@jackson-databind//jar",
         "@jackson-dataformat-cbor//jar",
+        "@jmespath-java//jar",
         "@joda-time//jar",
     ],
 )

external_plugin_deps.bzl

diff --git a/external_plugin_deps.bzl b/external_plugin_deps.bzl
index 8267357..ebb501a 100644
--- a/external_plugin_deps.bzl
+++ b/external_plugin_deps.bzl
@@ -55,6 +55,18 @@
     )
 
     maven_jar(
+        name = "aws-java-sdk-sts",
+        artifact = "com.amazonaws:aws-java-sdk-sts:1.11.960",
+        sha1 = "15751e23f8589362fb02c51b70cbd5ffdab47aff",
+    )
+
+    maven_jar(
+        name = "jmespath-java",
+        artifact = "com.amazonaws:jmespath-java:1.11.960",
+        sha1 = "f4586f31c330893299d96c51ec31dc0063a57c99",
+    )
+
+    maven_jar(
         name = "jackson-databind",
         artifact = "com.fasterxml.jackson.core:jackson-databind:" + JACKSON_VER,
         sha1 = "76e9152e93d4cf052f93a64596f633ba5b1c8ed9",