deps(go): bump module github.com/google/go-containerregistry to v0.22.1 - #10464

## What's Changed
* Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in https://github.com/google/go-containerregistry/pull/2426
* daemon: fix stale docker/docker reference in WithClient docs by @BobDu in https://github.com/google/go-containerregistry/pull/2428
* build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in https://github.com/google/go-containerregistry/pull/2422
* authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in https://github.com/google/go-containerregistry/pull/2420
* build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in https://github.com/google/go-containerregistry/pull/2423
* Support pulling images by sha512 digest by @BobDu in https://github.com/google/go-containerregistry/pull/2427
* Allow empty label and annotation values in crane mutate by @theadsingh in https://github.com/google/go-containerregistry/pull/2418
* fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in https://github.com/google/go-containerregistry/pull/2434
* validate: support index attestation manifests and empty configs by @Subserial in https://github.com/google/go-containerregistry/pull/2414
* name: improve error when parsing a reference with a URL scheme by @locker95 in https://github.com/google/go-containerregistry/pull/2431
* fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in https://github.com/google/go-containerregistry/pull/2436
* fix(release): honor declared Go toolchain by @rksharma-owg in https://github.com/google/go-containerregistry/pull/2435
* remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in https://github.com/google/go-containerregistry/pull/2432
* flatten: preserve config and layer media types when flattening by @Subserial in https://github.com/google/go-containerregistry/pull/2438
* fix(mutate): make Time layer updates lazy by @amarkdotdev in https://github.com/google/go-containerregistry/pull/2429
* build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in https://github.com/google/go-containerregistry/pull/2439
* remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in https://github.com/google/go-containerregistry/pull/2441

## New Contributors
* @shaggyinsomniac made their first contribution in https://github.com/google/go-containerregistry/pull/2426
* @BobDu made their first contribution in https://github.com/google/go-containerregistry/pull/2428
* @nileshpatil6 made their first contribution in https://github.com/google/go-containerregistry/pull/2420
* @theadsingh made their first contribution in https://github.com/google/go-containerregistry/pull/2418
* @locker95 made their first contribution in https://github.com/google/go-containerregistry/pull/2431
* @rksharma-owg made their first contribution in https://github.com/google/go-containerregistry/pull/2435
* @codysoyland made their first contribution in https://github.com/google/go-containerregistry/pull/2441

**Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.22.0...v0.22.1

## What's Changed
* mutate: let Time and Canonical take tarball.LayerOption by @mzihlmann in https://github.com/google/go-containerregistry/pull/2403
* build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane by @tprussak in https://github.com/google/go-containerregistry/pull/2412
* remote: resolve push-check credentials against the repository by @mzihlmann in https://github.com/google/go-containerregistry/pull/2411
* Allow single-character repository paths by @semx in https://github.com/google/go-containerregistry/pull/2407
* fix: add missing substitutions and workspace cleanup to new build files by @tprussak in https://github.com/google/go-containerregistry/pull/2413
* remote: retry failed Puller and Pusher initialization by @iahsanGill in https://github.com/google/go-containerregistry/pull/2406
* build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in https://github.com/google/go-containerregistry/pull/2405
* build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/google/go-containerregistry/pull/2415
* go.mod: bump Go version + add toolchain directive to replace .go-version file by @Subserial in https://github.com/google/go-containerregistry/pull/2416
* fix: Fix new build options and provenance by @tprussak in https://github.com/google/go-containerregistry/pull/2417
* fix(build): unify new build flow into cloudbuild_v2.yaml by @tprussak in https://github.com/google/go-containerregistry/pull/2419

## New Contributors
* @mzihlmann made their first contribution in https://github.com/google/go-containerregistry/pull/2403
* @tprussak made their first contribution in https://github.com/google/go-containerregistry/pull/2412
* @semx made their first contribution in https://github.com/google/go-containerregistry/pull/2407

**Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.21.9...v0.21.10