fix: bump `oras-go` to the latest commit which fixes the symlink issue by Wwwsylvia · Pull Request #1628 · oras-project/oras