fix(deps): update vulnerable dependencies to patched versions (#940)

- Update github.com/cilium/cilium to v1.17.16 (GHSA-q6h5-q3q6-f87x)
- Update github.com/containerd/containerd to v1.7.33 (GHSA-xhf5-q3q6-f87x, GHSA-jpcc-p29g-p8mq, GHSA-fqw6-gf59-qr4w)
- Update github.com/go-git/go-billy/v5 to v5.9.0 (GHSA-qw64-3x98-g7q2, GHSA-m3xc-h892-ggx6)
- Update github.com/go-git/go-git/v5 to v5.19.2 (GHSA-crhj-59gh-8x96, GHSA-m7cr-m3pv-hgrp, GHSA-389r-gv7p-r3rp, GHSA-w5pp-99ch-qj29, GHSA-xf85-363p-868w)
- Update github.com/google/cel-go to v0.29.0 (GHSA-389r-gv7p-r3rp / GHSA-pxq6-2prw-chj9) and adapt cel.NewStaticOptimizer error handling
- Update github.com/in-toto/in-toto-golang to v0.11.0 (GHSA-pmwq-pjrm-6p5r)
- Update go.mongodb.org/mongo-driver to v1.17.7 (GHSA-cp6g-7hqx-qxhp)
- Update golang.org/x/image to v0.41.0 (GHSA-q675-qj96-32m9)
- Update oras.land/oras-go/v2 to v2.6.2 (GHSA-vh4v-2xq2-g5cg, GHSA-fxhp-mv3v-67qp, GHSA-8xwf-rjm4-xvhv, GHSA-jxpm-75mh-9fp7, GHSA-xf85-363p-868w)

Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>