Add ability to mark a prebuilt_jar as "provided" - i.e. it's always a provided_dep

This can be useful for e.g. hadoop-client jars which should never be packaged into a fat jar. This also moves getDeclaredClasspathEntries out of the JavaLibrary interface since it's only used in DefaultJavaLibrary.