[0.11.x] Bump deps and go version for CVE fixes

[chenbh]

There's still 2 CVEs left, but bumping them is non-trivial and IMO not worth the hassle

┌───────────────────────────────┬─────────────────────┬──────────┬────────┬─────────────────────┬───────────────┬────────────────────────────────────────────────────────┐
│            Library            │    Vulnerability    │ Severity │ Status │  Installed Version  │ Fixed Version │                         Title                          │
├───────────────────────────────┼─────────────────────┼──────────┼────────┼─────────────────────┼───────────────┼────────────────────────────────────────────────────────┤
│ github.com/docker/docker      │ GHSA-jq35-85cj-fj4p │ MEDIUM   │ fixed  │ 23.0.4+incompatible │ 24.0.7        │ /sys/devices/virtual/powercap accessible by default to │
│                               │                     │          │        │                     │               │ containers                                             │
│                               │                     │          │        │                     │               │ https://github.com/advisories/GHSA-jq35-85cj-fj4p      │
├───────────────────────────────┼─────────────────────┼──────────┤        ├─────────────────────┼───────────────┼────────────────────────────────────────────────────────┤
│ github.com/sigstore/cosign/v2 │ CVE-2023-46737      │ LOW      │        │ 2.0.2               │ 2.2.1         │ cosign: potential denial of service by an              │
│                               │                     │          │        │                     │               │ attacker-controlled registry                           │
│                               │                     │          │        │                     │               │ https://avd.aquasec.com/nvd/cve-2023-46737             │
└───────────────────────────────┴─────────────────────┴──────────┴────────┴─────────────────────┴───────────────┴────────────────────────────────────────────────────────┘

• github.com/docker/docker: Only affects docker daemon, we're using it as a library
• github.com/sigstore/cosign/v2: Bumping this requires k8s api v0.28, which is something we're not doing in a patch release

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (ed579c9) 67.83% compared to head (8bf16f2) 67.83%.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@               Coverage Diff                @@
##           release/v0.11.x    #1411   +/-   ##
================================================
  Coverage            67.83%   67.83%           
================================================
  Files                  132      132           
  Lines                 8071     8071           
================================================
  Hits                  5475     5475           
  Misses                2166     2166           
  Partials               430      430           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.