buck2/20250401-r2: cve remediation (#62906)

buck2/20250401-r2: fix GHSA-qx2v-8332-m4fv
<!--ci-cve-scan:must-fix: GHSA-qx2v-8332-m4fv-->


Advisory data:
https://github.com/wolfi-dev/advisories/blob/main/buck2.advisories.yaml

---

### "Breadcrumbs" for this automated service

- **Source Code:** https://go/cve-remedy-automation-source
- **Logs:** https://go/cve-remedy-automation-logs
- **Docs:** _(not provided yet)_

---------

Signed-off-by: David Negreira <david.negreira@chainguard.dev>
Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>
Co-authored-by: Kyle Steere <kbsteere@users.noreply.github.com>
Co-authored-by: David Negreira <david.negreira@chainguard.dev>

Author: 3 people

buck2.yaml

@@ -1,7 +1,7 @@
 package:
   name: buck2
   version: 20250401
-  epoch: 2
+  epoch: 3 # GHSA-qx2v-8332-m4fv
   description: "Build system, successor to Buck"
   copyright:
     - license: MIT