fix: configure cri-based authentication for stargz to allow pulling from private repos

Following on from INC3838190, stargz-snapshotter is not currently configured to pull from private registries.

This PR adds the following:

• fix: sets up CRI-based authentication.
• refactor: moves all the pre-existing configuration that was baked into the docker deployment.
• feat: add config checksum annotation to auto-trigger restarting of daemonset after running helm upgrade.
• build: updates base image to fedora:40.
• chore: update image tags ready for patch release.
• refactor: stargz-snapshotter logs at an info level.

In addition to configuring containerdand stargz-snapshotter the daemon will now also restart kubelet as an additional flag is required to be passed to its config for cri auth.

Closes !2