Move up OSCAL submodule for current stable OSCAL

We need to do this to pull in the new Maven-based pom.xml
dependency management strategy, this is not in 1.0.2.

In current master of usnistgov/OSCAL, the necessary pom.xml for Maven
was introduced and has not been modified in the current commit on
master: 9365874bfccfa385beaea64a2333b9913cdb0beb.