[CI]: workaround gomodjail concurrency issue

[apostasie]

This adds a preflight call to nerdctl.gomodjail that will ensure extraction is done before we test, (hopefully) avoiding concurrency issues.

This is a workaround for AkihiroSuda/gomodjail#50 meant to reduce the disruptive effect on nerdctl CI, and must be removed once fixed upstream.

[apostasie]

Failures are:

• CNIEnv concurrency issues #3556
• windows is (now) getting over 3 seconds for rm tests (in TestRunRmTime) - this is likely a consequence of upgrading from containerd 1.7 to 2.0 - we probably just want to push the timeout from 3 seconds to 10 seconds (maybe only for windows)

[AkihiroSuda]

Thanks