build(deps): upgrade image-spec to 1.1.0-rc5 and oras-go to the latest

[shizhMSFT]

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Closes #1124

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?

[codecov-commenter]

Codecov Report

Merging #1154 (ae3651b) into main (5a1b006) will not change coverage.
The diff coverage is n/a.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

@@           Coverage Diff           @@
##             main    #1154   +/-   ##
=======================================
  Coverage   79.47%   79.47%           
=======================================
  Files          65       65           
  Lines        3493     3493           
=======================================
  Hits         2776     2776           
  Misses        506      506           
  Partials      211      211           

[qweeah]

LGTM