chore(deps): bump oras-project/setup-oras from 1 to 2 (#12567)

Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 1 to 2.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](https://github.com/oras-project/setup-oras/compare/v1...v2)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/gallery_publish.yml

@@ -45,7 +45,7 @@ jobs:
         run: |
           go test ./scripts/build/gallery -count=1
           go run ./scripts/build/gallery . "$GALLERY_SOURCE" "$RUNNER_TEMP/gallery"
-      - uses: oras-project/setup-oras@v1
+      - uses: oras-project/setup-oras@v2
         with:
           version: '1.3.0'
       - uses: sigstore/cosign-installer@v3