Update commons-collections to 3.2.2

[jbuncle]

Summary:

• update commons-collections from 3.2.1 to 3.2.2

Why:
commons-collections 3.2.1 is the old vulnerable line. Version 3.2.2 is the maintained 3.x release that disables unsafe deserialization by default.

Verification:

• relied on existing GitHub Actions validation for this repo