m/n/k/containerd: upgrade to v2

Upgrade containerd to 2.0, migrate config and adjust all paths.
No new K8s features are enabled yet, this will come separately.

Also bumps gVisor to the latest version and essentially reimplements the
shim as the API has changed a lot.

A drive-by fix in clitable was necessary as the x/tools upgrade
introduced a new analysis pass.

Change-Id: I9d25af203b94667aaac69a71eeccad2d42aa5f99
Reviewed-on: https://review.monogon.dev/c/monogon/+/3622
Tested-by: Jenkins CI
Reviewed-by: Jan Schär <jan@monogon.tech>
diff --git a/metropolis/node/core/BUILD.bazel b/metropolis/node/core/BUILD.bazel
index 667f7f3..b7d10af 100644
--- a/metropolis/node/core/BUILD.bazel
+++ b/metropolis/node/core/BUILD.bazel
@@ -47,8 +47,8 @@
         "//osbase/tpm",
         "//version",
         "@com_github_cenkalti_backoff_v4//:backoff",
-        "@com_github_containerd_containerd//:containerd",
-        "@com_github_containerd_containerd//namespaces",
+        "@com_github_containerd_containerd_v2//client",
+        "@com_github_containerd_containerd_v2//pkg/namespaces",
         "@com_github_opencontainers_runc//libcontainer/cgroups",
         "@org_golang_google_grpc//:grpc",
         "@org_golang_google_grpc//codes",