feat(oci): support for insecure registries

[brandtkeller]

Description of the PR

This PR implements support for configurable TLS verification settings on the OCI collectors. This is allows for prototyping and deployments with othewise insecure registries.

The updates use an options struct for future extension. I'll create an additional issue to support self-signed client cacert/client-cert/client-key and this pattern will allow extensions naturally.

Fixes #2828

PR Checklist

• All commits have a Developer Certificate of Origin (DCO) -- they are generated using -s flag to git commit.
• All new changes are covered by tests
• If GraphQL schema is changed, make generate has been run
• If GraphQL schema is changed, GraphQL client updates/additions have been made
• If OpenAPI spec is changed, make generate has been run
• If ent schema is changed, make generate has been run
• If collectsub protobuf has been changed, make proto has been run
• All CI checks are passing (tests and formatting)
• All dependent PRs have already been merged

[pxp928]

LGTM