[FLINK-3145][storm] pin Kryo version of transitive dependencies

This closes #1441.

docs/apis/storm_compatibility.md

@@ -49,6 +49,8 @@ Add the following dependency to your `pom.xml` if you want to execute Storm code
 </dependency>
 ~~~
 
+**Please note**: Do not add `storm-core` as a dependency. It is already included via `flink-storm`.
+
 **Please note**: `flink-storm` is not part of the provided binary Flink distribution.
 Thus, you need to include `flink-storm` classes (and their dependencies) in your program jar that is submitted to Flink's JobManager.
 See *WordCount Storm* within `flink-storm-examples/pom.xml` for an example how to package a jar correctly.

flink-contrib/flink-storm/pom.xml

@@ -35,6 +35,13 @@ under the License.
 	<packaging>jar</packaging>
 
 	<dependencies>
+		<dependency>
+			<!-- Together with the dependency management section in flink-parent, this
+			pins the Kryo version of transitive dependencies to the Flink Kryo version -->
+			<groupId>com.esotericsoftware.kryo</groupId>
+			<artifactId>kryo</artifactId>
+		</dependency>
+
 		<dependency>
 			<groupId>org.apache.flink</groupId>
 			<artifactId>flink-streaming-java</artifactId>