Dependency verification is brittle

Follow-up on #23 (closed)

There's an upstream Gradle issue (https://github.com/gradle/gradle/issues/19228) that prevents us from just deleting the dependency verification metadata and recreating it using our script update-dependency-verification.sh.

A possible workaround is to set GRADLE_USER_HOME to a temporary directory while executing the commands in the script.