ci: extract deps versions from nerdctl-full archive & add soci/ecr-cred-helper conf & workflow

[Swapnanil-Gupta]

Issue #, if available:

Description of changes:
This PR:

• extracts the dependency versions from the nerdctl full archive
• adds ecr-cred-helper and soci conf & corresponding update workflows

This helps us:

• inject these versions during Finch's build process and E2E tests.
• get better visibility into the actual dependency versions

Testing done:
See:

• https://github.com/runfinch/finch-core/actions/runs/21083692222/job/60642790314?pr=818

• https://github.com/runfinch/finch-core/actions/runs/21083692222/job/60642790323?pr=818

• I've reviewed the guidance in CONTRIBUTING.md

License Acceptance

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[Swapnanil-Gupta]

In the worst case, the update-dependencies workflow will create 6 PRs for us to review and merge -

• Lima/macOS image/WSL rootfs
• nerdctl full archive
• QEMU
• AL & Ubuntu deps
• ECR cred helper
• SOCI

Do we want all of these PRs clubbed into one or is it better if we have the ability to selectively merge the ones we want?

[pendo324]

Do we want all of these PRs clubbed into one or is it better if we have the ability to selectively merge the ones we want?

6 PRs is manageable, IMO

[Shubhranshu153]

Lets add a note to finch release please checklist to merge all the PR's for dependency and probably in internal runbooks as well.
Thanks.