add the api usage check with de.thetaphi.forbiddenapis to #115

[xiaowing]

add the plugin of de.thetaphi.forbiddenapis to prevent some unexpected api usages in future code contribution

[xiaowing]

it's very interesting to find that the travis-ci triggering a bug of de.thetaphi.forbiddenapis forbidden-api#178

this bug will cause the api check failed in the travis-ci platform reporting the java.util.Randorm usage, even if that not being declared as a forbidden one in the API black-list.

[ERROR] Forbidden method invocation: java.util.Random#() [Use ThreadLocalRandom.current() or the constructor with a seed (the latter in tests only!)]
[ERROR] in com.aliyun.hitsdb.client.error.TestHiTSDBClientBatchPutExceptionCallback (TestHiTSDBClientBatchPutExceptionCallback.java:81)
[ERROR] Forbidden method invocation: java.util.Random#() [Use ThreadLocalRandom.current() or the constructor with a seed (the latter in tests only!)]
[ERROR] in com.aliyun.hitsdb.client.error.TestHiTSDBClientBatchPutExceptionCallback (TestHiTSDBClientBatchPutExceptionCallback.java:97)
[ERROR] Forbidden method invocation: java.util.Random#() [Use ThreadLocalRandom.current() or the constructor with a seed (the latter in tests only!)]
......

since all the Randorm usage were all introduced in the test code, so currently we have to limit the execution of forbidden-api within the compile phase, like this

<executions>
    <execution>
        <id>compile</id>
	<phase>compile</phase>
	<goals>
	    <goal>check</goal>
	</goals>
	<configuration>
	    <bundledSignatures>
	        <!-- Check jdk-system-out only for production code, but not in test code -->
	        <!--<bundledSignature>jdk-unsafe</bundledSignature>-->
	        <!--<bundledSignature>jdk-system-out</bundledSignature>-->
	    </bundledSignatures>
	 </configuration>
    </execution>
    <!--
    <execution>
        <id>testCompile</id>
	<phase>test-compile</phase>
	<goals>
	    <goal>testCheck</goal>
	 </goals>
    </execution>
    -->
</executions>

As a result, the test-compile phase CANNOT be reopened until the release of de.thetaphi.forbiddenapis 3.2