build(deps): bump oras-go and oras-credentials-go

[qweeah]

This PR bumps underlying dependencies with updated E2E tests.

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?

[codecov-commenter]

Codecov Report

Merging #946 (e47000f) into main (776041f) will decrease coverage by 0.08%.
The diff coverage is n/a.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##             main     #946      +/-   ##
==========================================
- Coverage   81.01%   80.94%   -0.08%     
==========================================
  Files          53       53              
  Lines        2776     2776              
==========================================
- Hits         2249     2247       -2     
- Misses        358      360       +2     
  Partials      169      169              

see 1 file with indirect coverage changes

[shizhMSFT]

LGTM