Bump framework to v2.7.40

Uses golang 1.22.4 which fixes CVE-2024-24790

Signed-off-by: Mauro Morales <[email protected]>

Earthfile

@@ -9,7 +9,7 @@ ARG LUET_VERSION=0.35.1
 # renovate: datasource=docker depName=aquasec/trivy
 ARG TRIVY_VERSION=0.50.1
 # renovate: datasource=github-releases depName=kairos-io/kairos-framework
-ARG KAIROS_FRAMEWORK_VERSION=v2.7.39
+ARG KAIROS_FRAMEWORK_VERSION=v2.7.40
 ARG COSIGN_SKIP=".*quay.io/kairos/.*"
 # TODO: rename ISO_NAME to something like ARTIFACT_NAME because there are place where we use ISO_NAME to refer to the artifact name