chore(*): bump oci and spin crates; update usage

[vdice]

• Bumps the oci-distribution crate to fermyon/oci-distribution@7e4ce9b
• Bumps the spin crates to fermyon/spin@86a5877

With these bumps come the following fixes/features, both relevant to spin cloud deploy:

• OCI layers for an application are de-duplicated which can help reduce the size of some apps (think: heavy on static assets shared across components; heavy component re-use). Recall that Fermyon Cloud currently enforces a 100 MB app limit. Prior to deduplication, some apps would exceed this limit and attempts to deploy would fail as a result. (Ref feat(oci): deduplicate layers prior to push; archive if needed spin#2395)
• Increase the default token expiration timeout when pushing a spin app. For apps with a large number of (potentially large-sized) layers, the upstream default of 60 seconds may be too brief in some cases. (Spin now/currently uses a default of 300s; ref feat(oci): set token expiration for oci client spin#2417)