Updated clean dependency to latest version and push also latest tag when publishing

[ifbyol]

I created a new version of clean to fix a few vulnerabilities that were being reported (I only had to create a new release to rebuild the image).

2024-09-03T10:17:16+02:00	INFO	Need to update DB
2024-09-03T10:17:16+02:00	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
52.71 MiB / 52.71 MiB [--------------------------------------------------------------------------------------------------------------------------] 100.00% 25.19 MiB p/s 2.3s
2024-09-03T10:17:20+02:00	INFO	Vulnerability scanning is enabled
2024-09-03T10:17:20+02:00	INFO	Secret scanning is enabled
2024-09-03T10:17:20+02:00	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-09-03T10:17:20+02:00	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-09-03T10:17:22+02:00	INFO	Number of language-specific files	num=1
2024-09-03T10:17:22+02:00	INFO	[gobinary] Detecting vulnerabilities...
2024-09-03T10:17:22+02:00	WARN	Using severities from other vendors for some vulnerabilities. Read https://aquasecurity.github.io/trivy/v0.53/docs/scanner/vulnerability#severity-selection for details.

usr/local/bin/clean (gobinary)

Total: 4 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 1, CRITICAL: 1)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │  Fixed Version  │                            Title                             │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────┼──────────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2024-24790 │ CRITICAL │ fixed  │ 1.22.2            │ 1.21.11, 1.22.4 │ golang: net/netip: Unexpected behavior from Is methods for   │
│         │                │          │        │                   │                 │ IPv4-mapped IPv6 addresses                                   │
│         │                │          │        │                   │                 │ https://avd.aquasec.com/nvd/cve-2024-24790                   │
│         ├────────────────┼──────────┤        │                   ├─────────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2024-24788 │ HIGH     │        │                   │ 1.22.3          │ golang: net: malformed DNS message can cause infinite loop   │
│         │                │          │        │                   │                 │ https://avd.aquasec.com/nvd/cve-2024-24788                   │
│         ├────────────────┼──────────┤        │                   ├─────────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2024-24789 │ MEDIUM   │        │                   │ 1.21.11, 1.22.4 │ golang: archive/zip: Incorrect handling of certain ZIP files │
│         │                │          │        │                   │                 │ https://avd.aquasec.com/nvd/cve-2024-24789                   │
│         ├────────────────┤          │        │                   ├─────────────────┼──────────────────────────────────────────────────────────────┤
│         │ CVE-2024-24791 │          │        │                   │ 1.21.12, 1.22.5 │ net/http: Denial of service due to improper 100-continue     │
│         │                │          │        │                   │                 │ handling in net/http                                         │
│         │                │          │        │                   │                 │ https://avd.aquasec.com/nvd/cve-2024-24791                   │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────┴──────────────────────────────────────────────────────────────┘

After this, there are no more vulnerabilities reported.

I also added a change to push the changes to latest tag. In that way, we can always scan okteto/bin:latest when releasing CLI without having to keep updated the version of the bin image we use