Upgrade to containerd 2

[slonopotamus]

This PR depends on

• Dockerfile: update containerd binary to v2.0.0 #5463
• Bump typeurl to 2.2.3 #5513

Non-import changes:

1. stargz-snapshotter dependency was bumped to unreleased commit because of containerd api changes
2. fuse-overlayfs-snapshotter dependency was bumped to v2.0.0
3. ExpiresIn was changed to ExpiresInSeconds in authprovider.go
4. Workaround for archive: use 1970-01-01 as the whiteout timestamp containerd/containerd#8764 was removed in overlay_linux.go
5. Minor code cleanup in main_containerd_worker_windows.go
6. Adjust expected string in testUndeclaredArg in dockerfile_lint_test.go
7. I dropped testSchema1Image test. It is very nontrivial to push CONTAINERD_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE=1 env variable from a single place to both rootful and rootless tests (if you know such place, tell me!). Schema v1 is going away in containerd 2.1 anyway. buildkit still supports in currently. If this change is unacceptable... Well, need more time to find where exactly to put CONTAINERD_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE=1 in buildkit test framework.

Closes #4630
Closes #5514

[slonopotamus]

Current status:

1. TestExportedImageLabels fails on both Windows and Linux when containerd is used:

=== RUN   TestIntegration/TestExportedImageLabels/worker=containerd
    client_test.go:489: 
        	Error Trace:	D:/a/buildkit/buildkit/client/client_test.go:489
        	            				D:/a/buildkit/buildkit/util/testutil/integration/run.go:97
        	            				D:/a/buildkit/buildkit/util/testutil/integration/run.go:211
        	Error:      	Should be true
        	Test:       	TestIntegration/TestExportedImageLabels/worker=containerd

2. TestSchema1Image fails in rootless configurations:

client_test.go:6914: 
        	Error Trace:	/src/client/client_test.go:6914
        	            				/src/util/testutil/integration/run.go:97
        	            				/src/util/testutil/integration/run.go:211
        	Error:      	Received unexpected error:
        	            	failed to load cache key: Pulling Schema 1 images have been deprecated and disabled by default since containerd v2.0. As a workaround you may set an environment variable `CONTAINERD_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE=1`, but this will be completely removed in containerd v2.1.

I'm currently trying to understand where I need to pass CONTAINERD_ENABLE_DEPRECATED_PULL_SCHEMA_1_IMAGE=1 env variable in rootless setup and why my change to hack/test doesn't apply to it (though it works for rootful)

3. And... that's all, other things seem to be green.

[dmcgowan]

We should figure out why the test is failing but I also think its time to roadmap removal of the schema1 support. Especially for build use cases, there shouldn't be a need to build from such old images as a base. If so, explicit conversion may not be so bad if some users still require.

[slonopotamus]

One last failing test is related to the way how rootless tests are set up. See #4630 (comment) for discussion.