Update ytt to latest (#215)

This is causing dependabot to fail to update with the error:

```
Dependabot wasn't able to update downloading
The module path downloading found in your /hack/tools/go.mod doesn't match the actual path carvel.dev/ytt found in the dependency's go.mod.

Updating the module path in your go.mod to carvel.dev/ytt should resolve this issue.
```

hack/tools module now requires go 1.21 as a result of the ytt module bump

Signed-off-by: Sunjay Bhatia <sunjayb@vmware.com>

Makefile

@@ -104,7 +104,7 @@ kind-e2e-test: $(KUSTOMIZE) $(KIND) $(KUBECTL) $(JQ) $(YTT)
 ytt: $(YTT)
 
 $(YTT): $(TOOLS_DIR)/go.mod # Build ytt from tools folder.
-	cd $(TOOLS_DIR); go build -tags=tools -o $(BIN_DIR)/ytt github.com/k14s/ytt/cmd/ytt
+	cd $(TOOLS_DIR); go build -tags=tools -o $(BIN_DIR)/ytt carvel.dev/ytt/cmd/ytt
 
 ## --------------------------------------
 ## AKO Operator

hack/tools/go.mod

@@ -1,9 +1,9 @@
 module gitlab.eng.vmware.com/core-build/tkg-connectivity/hack/tools
 
-go 1.20
+go 1.21
 
 require (
-	github.com/k14s/ytt v0.28.0
+	carvel.dev/ytt v0.48.0
 	github.com/onsi/ginkgo v1.16.5
 	k8s.io/code-generator v0.26.1
 	sigs.k8s.io/controller-tools v0.9.2
@@ -12,10 +12,10 @@ require (
 )
 
 require (
-	github.com/BurntSushi/toml v1.0.0 // indirect
+	github.com/BurntSushi/toml v1.2.1 // indirect
 	github.com/alessio/shellescape v1.4.1 // indirect
 	github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a // indirect
-	github.com/cppforlife/cobrautil v0.0.0-20200108171912-b289811fd2b9 // indirect
+	github.com/cppforlife/cobrautil v0.0.0-20200514214827-bb86e6965d72 // indirect
 	github.com/cppforlife/go-cli-ui v0.0.0-20200505234325-512793797f05 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/emicklei/go-restful/v3 v3.9.0 // indirect
@@ -34,14 +34,15 @@ require (
 	github.com/golang/protobuf v1.5.2 // indirect
 	github.com/google/gnostic v0.5.7-v3refs // indirect
 	github.com/google/go-cmp v0.5.9 // indirect
-	github.com/google/gofuzz v1.1.0 // indirect
+	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
-	github.com/hashicorp/go-version v1.2.0 // indirect
+	github.com/hashicorp/go-version v1.6.0 // indirect
 	github.com/imdario/mergo v0.3.6 // indirect
-	github.com/inconshreveable/mousetrap v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/k14s/starlark-go v0.0.0-20200720175618-3a5c849cc368 // indirect
 	github.com/mailru/easyjson v0.7.6 // indirect
 	github.com/mattn/go-colorable v0.1.8 // indirect
 	github.com/mattn/go-isatty v0.0.14 // indirect
@@ -54,9 +55,9 @@ require (
 	github.com/olekukonko/tablewriter v0.0.4 // indirect
 	github.com/pelletier/go-toml v1.9.4 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/spf13/cobra v1.4.0 // indirect
+	github.com/spf13/cobra v1.7.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
-	github.com/stretchr/objx v0.4.0 // indirect
+	github.com/stretchr/objx v0.5.0 // indirect
 	github.com/xlab/treeprint v1.1.0 // indirect
 	go.starlark.net v0.0.0-20200306205701-8dd3e2ee1dd5 // indirect
 	golang.org/x/mod v0.8.0 // indirect