Update JSR305 to 3.0

Currently this artifact is listed as dependency to Google Guice. This
is wrong: it's not used by Guice, but by closure-templates. However,
it's also used directly by gitiles-servlet, so put it in the
top-level lib package. (In general we have dependencies in lib
subpackages if they are used directly only within that package.)

Change-Id: I5ab10ed2c0f92d41d358b0a184d9e3777cc1d67a

gitiles-servlet/BUCK

diff --git a/gitiles-servlet/BUCK b/gitiles-servlet/BUCK
index 8f5e3f3..4fa89ab 100644
--- a/gitiles-servlet/BUCK
+++ b/gitiles-servlet/BUCK
@@ -1,10 +1,11 @@
 SRCS = glob(['src/main/java/**/*.java'])
 RSRC = glob(['src/main/resources/**/*'])
 DEPS = [
+  '//lib:commons-lang',
+  '//lib:gson',
   '//lib:guava',
   '//lib:joda-time',
-  '//lib:gson',
-  '//lib:commons-lang',
+  '//lib:jsr305',
   '//lib:prettify',
   '//lib/jgit:jgit',
   '//lib/jgit:jgit-servlet',
@@ -67,7 +68,6 @@
     '//lib/guice:guice_library',
     '//lib/guice:guice-assistedinject',
     '//lib/guice:javax-inject',
-    '//lib/guice:jsr305',
     '//lib/jgit:jgit-archive_library',
     '//lib:servlet-api_2_5',
   ],