fix: fix golang.org/x/net vulnerability

[zhiying-lin]

What type of PR is this?

/kind regression
-->

What this PR does / why we need it:

Which issue(s) this PR fixes:

• fix the trivy vulnerability failure
• add a bot to weekly upgrade the dependencies

Fixes #

Requirements:

• run make reviewable for basic local test
• Read and followed fleet-networking's Code of conduct.
• uses conventional commit messages
• includes documentation
• adds unit tests

How has this code been tested

Special notes for your reviewer

[codecov]

Codecov Report

Merging #152 (1b6967a) into main (f901a19) will decrease coverage by 0.55%.
Report is 1 commits behind head on main.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #152      +/-   ##
==========================================
- Coverage   79.26%   78.72%   -0.55%     
==========================================
  Files          20       20              
  Lines        2735     2735              
==========================================
- Hits         2168     2153      -15     
- Misses        450      464      +14     
- Partials      117      118       +1     

see 5 files with indirect coverage changes