fix: retain multiplatform manifest list annotations

[robert-cronin]

Retain multiplatform manifest list annotations
Add annotation verification to multiplatform integration tests

Closes #1119

Example of patched image now with annotations retained: https://oci.dag.dev/?image=ghcr.io%2Frobert-cronin%2Fnginx%3A1.27.0-patched-annotations

[codecov]

Codecov Report

Attention: Patch coverage is 0.58480% with 170 lines in your changes missing coverage. Please review.

Project coverage is 40.51%. Comparing base (e9da0ea) to head (b9a1a75).
Report is 2 commits behind head on main.

Files with missing lines	Patch %	Lines
pkg/patch/patch.go	0.94%	105 Missing ⚠️
pkg/utils/utils.go	0.00%	65 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1120      +/-   ##
==========================================
- Coverage   42.35%   40.51%   -1.85%     
==========================================
  Files          24       24              
  Lines        3619     3786     +167     
==========================================
+ Hits         1533     1534       +1     
- Misses       1974     2140     +166     
  Partials      112      112              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sozercan]

@robert-cronin merged podman pr, a few minor conflicts on this one now.

[robert-cronin]

@robert-cronin merged podman pr, a few minor conflicts on this one now.

@sozercan thank you, should be fixed now!

[sozercan]

discussed offline with @robert-cronin about moving annotations to index level, removing patched bool annotation, and changing timestamp annotation to "last patched" (perhaps there might be prior art in predefined oci annotations)

[robert-cronin]

discussed offline with @robert-cronin about moving annotations to index level, removing patched bool annotation, and changing timestamp annotation to "last patched" (perhaps there might be prior art in predefined oci annotations)

@sozercan I've moved the copa specific annotation over to the platform level on both the manifest level and inside the manifest list on the per-platform annotations themselves. Below is an example patched image:

manifest list: https://oci.dag.dev/?image=ghcr.io%2Frobert-cronin%2Fnginx%3A1.27.0-patched-annotations
manifest: https://oci.dag.dev/?image=ghcr.io/robert-cronin/nginx@sha256:6de1ae4e914ece469361cfea1ca122cbd424f8748e8cbb50a769dd22b9ec619e&mt=application%2Fvnd.oci.image.manifest.v1%2Bjson&size=1885

[sozercan]

@robert-cronin i pushed a change to change annotation to image.patched. this aligns with eol annotations https://toddysm.com/2023/07/18/using-oci-annotation-to-track-container-image-lifecycle/

[robert-cronin]

@robert-cronin i pushed a change to change annotation to image.patched. this aligns with eol annotations https://toddysm.com/2023/07/18/using-oci-annotation-to-track-container-image-lifecycle/

Sounds good to me, thank you!