chore(dependabot): bump github.com/open-component-model/ocm

Bumps [github.com/open-component-model/ocm](https://github.com/open-component-model/ocm) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/open-component-model/ocm/releases)
- [Changelog](https://github.com/open-component-model/ocm/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/ocm@v0.7.0...v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/open-component-model/ocm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>