How to use remote Ivy artefacts in Maven jobs with different binary repository managers?
I'd go with (2). Since Bob has a more rigid setup (requires Maven metadata), and Alice can provide that (using more flexible Ant), that sounds like the easiest way to go.