LICENSE.txt/NOTICE.txt miss dependencies for binary artifacts

[kou]

Describe the bug, including details regarding any error messages, version, and platform.

The current LICENSE.txt/NOTICE.txt are valid only for tar.gz.
jars redistribute dependencies. So we need to mention them.
See also: https://infra.apache.org/licensing-howto.html#binary