Bring new test images for CI

[Xynnn007]

Fixes: #130

[Xynnn007]

I have replaced the test image with the one of community. However, that one is not signed by cosign now. I will use the policy

{
    "default": [{"type": "reject"}], 
    "transports": {
        "docker": {
            "ghcr.io/confidential-containers": [
                {
                    "type": "insecureAcceptAnything"
                }
            ]
        }
    }
}

which means the image will be accepted without signature verification.

[mythi]

only some minor comments. Can you squash some of the commits (e.g., image-rs + Cargo updates)

[mythi]

@Xynnn007 thanks!