update bouncycastle to get CVE fix

[mohamedhafez]

Hey guys, my vulnerability scanner just said there's a moderate CVE in org.bouncycastle:bcpkix-jdk18on 1.83 in jruby-openssl. Does this apply to us? https://osv.dev/vulnerability/GHSA-wg6q-6289-32hp

[headius]

All recent CVEs in BC, whether they affect jruby-openssl users or not, have been released in 0.16.2 (see #360 #367).