build(deps): bump oras-project/setup-oras from 1.2.4 to 2.0.0 (#36504)

Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 1.2.4 to 2.0.0.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@22ce207...38de303)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/index-update.yml

@@ -20,7 +20,7 @@ jobs:
         with:
           ref: index
           path: index
-      - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6
+      - uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3
       - id: get-oci-index
         name: Get OCI index
         run: |