Replace log4j test-scope dependency with logback

log4j is included as a test-scope dependency, as the designated slf4j logger implementation for our test logging. This may be affected by https://nvd.nist.gov/vuln/detail/CVE-2021-44228 given we are doing active network tests.

Replacing it with logback initially could be useful.