bump: bump oras-go to 2.5.0

[wangxiaoxuan273]

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Part of #1275
Fixes #1304

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?

[shizhMSFT]

The build and the lint failed.

The build failure is due to the E2E test failure caused by a bug in checking the reference for oci-layout (check line 77).

oras/cmd/oras/root/tag.go

Lines 75 to 82 in e8da6e5

	PreRunE: func(cmd *cobra.Command, args []string) error {
	opts.RawReference = args[0]
	if _, err := registry.ParseReference(opts.RawReference); err != nil {
	return fmt.Errorf("unable to add tag for '%s': %w", opts.RawReference, err)
	}
	opts.targetRefs = args[1:]
	return option.Parse(&opts)
	},

[qweeah]

@shizhMSFT is right, you need to 1) handle all invalid reference error in tag list reflecting #1058; 2) improve target.Parse to accommodate changes in oras-go.

[qweeah]

Also need to refactor reference parsing for OCI image layout and do it in target.Parse, so unable to add tag for '%s' can be printed for OCI layout

[shizhMSFT]

This PR covers #1307 but does not cover #1306

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.27%. Comparing base (24c2acf) to head (39155e8).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1303      +/-   ##
==========================================
+ Coverage   82.10%   82.27%   +0.16%     
==========================================
  Files          83       83              
  Lines        4030     4029       -1     
==========================================
+ Hits         3309     3315       +6     
+ Misses        498      494       -4     
+ Partials      223      220       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[qweeah]

Since this PR also fixes #1304, we also need to enhance E2E tests.

[wangxiaoxuan273]

Since this PR also fixes #1304, we also need to enhance E2E tests.

Added a test case for #1304

[qweeah]

LGTM

[shizhMSFT]

LGTM with suggestions

[shizhMSFT]

LGTM

[qweeah]

LGTM