chore: bump oci deps

[ricochet]

oci-wasm comes with updated wasm-tools crate versions with 0.244.

Added tls_certs_only: self.client_config.tls_certs_only.clone() to the Clone impl for OciRegistryConfig, since ClientConfig in 0.16 added a new tls_certs_only field that doesn't implement Copy.

[ricochet]

We're going to need another release of wkg to cut the next set of rc's for p3.

When running wkg oci push, the publish pipeline fails with wkg 0.14.

Failure:

wkg oci push ghcr.io/webassembly/wasi/clocks:0.3.0-rc-2026-02-05 wasi-clocks.wasm --annotation 'org.opencontainers.image.description=WASI clock interfaces for monotonic and system clocks' --annotation org.opencontainers.image.source=https://github.com/webassembly/wasi --annotation org.opencontainers.image.url=https://wasi.dev/ --annotation org.opencontainers.image.version=0.3.0-rc-2026-02-05 --annotation 'org.opencontainers.image.licenses=Apache-2.0 WITH LLVM-exception'
Error: Unable to parse component

Caused by:
    0: failed to decode WIT component
    1: invalid leading byte (0x43) for component defined type (at offset 0xef)

Failed job: https://github.com/WebAssembly/WASI/actions/runs/21728732840/job/62678359503

With this update to bump oci-wasm, I am able to publish:

cargo build --release -p wkg
./target/release/wkg wit build -o /tmp/wasi-clocks.wasm --wit-dir WASI/proposals/clocks/wit-0.3.0-draft
./target/release/wkg oci push ghcr.io/ricochet/wasi/clocks:0.3.0-rc-2026-02-05 /tmp/wasi-clocks.wasm