Java: update newSchemaFactory to the merged Commons XML 0.1.0 API

apache/commons-xml#32 replaced the no-argument newSchemaFactory() with
newSchemaFactory(String schemaLanguage), without keeping an overload.
Update the 0.1.0 stub and the XXE test accordingly, as suggested by
Copilot. The QL model matches the method by name, so no query or
library changes are needed.

Assisted-By: Claude Fable 5 <noreply@anthropic.com>

Author: ppkarwasz

java/ql/test/query-tests/security/CWE-611/XmlFactoriesTests.java

@@ -1,5 +1,6 @@
 import java.net.Socket;
 
+import javax.xml.XMLConstants;
 import javax.xml.parsers.DocumentBuilder;
 import javax.xml.parsers.DocumentBuilderFactory;
 import javax.xml.parsers.SAXParser;
@@ -56,7 +57,7 @@ public void hardenedTransformer(Socket sock) throws Exception {
   }
 
   public void hardenedSchema(Socket sock) throws Exception {
-    SchemaFactory factory = XmlFactories.newSchemaFactory();
+    SchemaFactory factory = XmlFactories.newSchemaFactory(XMLConstants.W3C_XML_SCHEMA_NS_URI);
     Schema schema = factory.newSchema(new StreamSource(sock.getInputStream())); // safe
   }
 }