treewide: update sandboxroot to fedora 40, nix to 24.05

We didn't bump our sandboxroot in a long time, this updates it to fedora
 40
 and updates the nix shell to nixpkgs-24.05. It also bumps rules_oci to
 the current version.

Change-Id: I9ffb6f4dcd1a95be48b52015df987824dbb169f6
Reviewed-on: https://review.monogon.dev/c/monogon/+/3205
Tested-by: Jenkins CI
Reviewed-by: Leopold Schabel <leo@monogon.tech>
diff --git a/third_party/sandboxroot/repo.yaml b/third_party/sandboxroot/repo.yaml
index e781cfc..e0dc51d 100644
--- a/third_party/sandboxroot/repo.yaml
+++ b/third_party/sandboxroot/repo.yaml
@@ -1,21 +1,21 @@
 repositories:
 - arch: x86_64
-  metalink: https://mirrors.fedoraproject.org/metalink?repo=fedora-37&arch=x86_64
-  name: 37-x86_64-primary-repo
+  metalink: https://mirrors.fedoraproject.org/metalink?repo=fedora-40&arch=x86_64
+  name: 40-x86_64-primary-repo
   mirrors:
-    - https://ftp.fau.de/fedora/linux/releases/37/Everything/x86_64/os
-    - https://ftp.halifax.rwth-aachen.de/fedora/linux/releases/37/Everything/x86_64/os
-    - https://mirror.23m.com/fedora/linux/releases/37/Everything/x86_64/os
-    - https://ftp.plusline.net/fedora/linux/releases/37/Everything/x86_64/os
-    - https://storage.googleapis.com/monogon-infra-public/mirror/fedora/linux/releases/37/Everything/x86_64/os
-  gpgkey: https://storage.googleapis.com/monogon-infra-public/RPM-GPG-KEY-fedora-37-x86_64
+    - https://ftp.fau.de/fedora/linux/releases/40/Everything/x86_64/os
+    - https://ftp.halifax.rwth-aachen.de/fedora/linux/releases/40/Everything/x86_64/os
+    - https://mirror.23m.com/fedora/linux/releases/40/Everything/x86_64/os
+    - https://ftp.plusline.net/fedora/linux/releases/40/Everything/x86_64/os
+    - https://storage.googleapis.com/monogon-infra-public/mirror/fedora/linux/releases/40/Everything/x86_64/os
+  gpgkey: https://storage.googleapis.com/monogon-infra-public/RPM-GPG-KEY-fedora-40-primary
 - arch: x86_64
-  metalink: https://mirrors.fedoraproject.org/metalink?repo=updates-released-f37&arch=x86_64
-  name: 37-x86_64-update-repo
-  gpgkey: https://storage.googleapis.com/monogon-infra-public/RPM-GPG-KEY-fedora-37-x86_64
+  metalink: https://mirrors.fedoraproject.org/metalink?repo=updates-released-f40&arch=x86_64
+  name: 40-x86_64-update-repo
+  gpgkey: https://storage.googleapis.com/monogon-infra-public/RPM-GPG-KEY-fedora-40-primary
   mirrors:
-    - https://ftp.fau.de/fedora/linux/updates/37/Everything/x86_64
-    - https://ftp.halifax.rwth-aachen.de/fedora/linux/updates/37/Everything/x86_64
-    - https://mirror.23m.com/fedora/linux/updates/37/Everything/x86_64
-    - https://ftp.plusline.net/fedora/linux/updates/37/Everything/x86_64
-    - https://storage.googleapis.com/monogon-infra-public/mirror/fedora/linux/updates/37/Everything/x86_64
+    - https://ftp.fau.de/fedora/linux/updates/40/Everything/x86_64
+    - https://ftp.halifax.rwth-aachen.de/fedora/linux/updates/40/Everything/x86_64
+    - https://mirror.23m.com/fedora/linux/updates/40/Everything/x86_64
+    - https://ftp.plusline.net/fedora/linux/updates/40/Everything/x86_64
+    - https://storage.googleapis.com/monogon-infra-public/mirror/fedora/linux/updates/40/Everything/x86_64