After about half a day of searching (including the plugin-publish-plugin code), I managed to find the undocumented magic to remove dependencies from the generated jar. Maven calls this a ‘reduced dependency jar’
Here’s the result, with the hopes it will save others hours of searching
pluginBundle {
//
// Standard config cruft removed for brevity.
//
withDependencies {
it.clear()
}
}