Add ci.opensearch.org maven2 mirror to avoid throttling (geospatial)

[peterzhuamazon]

Description

Add ci.opensearch.org maven2 mirror to avoid throttling (geospatial)

Related Issues

opensearch-project/opensearch-build#6062

Check List

• New functionality includes testing.
• New functionality has been documented.
• API changes companion pull request created.
• Commits are signed per the DCO using --signoff.
• Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[github-actions]

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 05b89e9.

Path	Line	Severity	Description
build.gradle	32	high	New Maven repository source added (https://ci.opensearch.org/maven2/) in buildscript block. Per mandatory rule, all package registry/source URL changes must be flagged. Maintainers must verify this URL is controlled by the expected party and that artifacts resolved from it are authentic.
build.gradle	111	high	New Maven repository source added (https://ci.opensearch.org/maven2/) in allprojects repositories block. This expands the set of artifact sources for all subprojects and must be verified by maintainers.
client/build.gradle	24	high	New Maven repository source added (https://ci.opensearch.org/maven2/) in the client subproject. Maintainers must verify this repository is trusted and cannot be used to shadow artifacts from mavenCentral or other authoritative sources.
libs/h3/build.gradle	34	high	New Maven repository source added (https://ci.opensearch.org/maven2/) in the h3 library subproject. Maintainers must verify this repository is trusted and cannot be used to shadow artifacts from mavenCentral or other authoritative sources.
settings.gradle	10	high	New pluginManagement block introduced with https://ci.opensearch.org/maven2/ listed before gradlePluginPortal() and mavenCentral(). Repository ordering matters: placing this URL first means Gradle will attempt to resolve build plugins from it before official sources, increasing the risk of artifact substitution if the endpoint is compromised or misconfigured.

The table above displays the top 10 most important findings.

Total: 5 | Critical: 0 | High: 5 | Medium: 0 | Low: 0

---

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

---

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

[peterzhuamazon]

expected mirror update.