chore: update osv-scalibr

[Ly-Joey]

Update osv-scalibr to latest commit and fix things along the way:

• New proto for osvscannerjson (from osv-scablir@bcaae84)
• baseimage enricher to use new plugin config (from osv-scalibr@cb4abf7)
• Add normalization to some tests that are now non-deterministic (from osv-scalibr@d3d4bcb)

[codecov-commenter]

Codecov Report

❌ Patch coverage is 31.30435% with 79 lines in your changes missing coverage. Please review.
✅ Project coverage is 78.58%. Comparing base (007e01a) to head (988feed).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...t/language/osv/osvscannerjson/proto/metadata.pb.go	24.35%	58 Missing and 1 partial ⚠️
...ibrextract/language/osv/osvscannerjson/metadata.go	11.76%	15 Missing ⚠️
cmd/osv-scanner/internal/testcmd/run.go	83.33%	2 Missing and 1 partial ⚠️
internal/scalibrplugin/presets.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2736      +/-   ##
==========================================
- Coverage   79.71%   78.58%   -1.13%     
==========================================
  Files         117      119       +2     
  Lines        8010     8122     +112     
==========================================
- Hits         6385     6383       -2     
- Misses       1248     1353     +105     
- Partials      377      386       +9     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.