chore(ci): bump oras-project/setup-oras from 1 to 2

Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 1 to 2.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@v1...v2)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/build.yaml

@@ -78,7 +78,7 @@ jobs:
         with:
           name: acceptance-${{ github.sha }}
           path: accepted
-      - uses: oras-project/setup-oras@v1
+      - uses: oras-project/setup-oras@v2
       - uses: astral-sh/setup-uv@v6
       - name: Prepare all unchanged validated assets before publication
         run: |