🌱 Bump pkg.package-operator.run/boxcutter from 0.8.1 to 0.9.0

Bumps [pkg.package-operator.run/boxcutter](https://github.com/package-operator/boxcutter) from 0.8.1 to 0.9.0.
- [Release notes](https://github.com/package-operator/boxcutter/releases)
- [Commits](package-operator/boxcutter@v0.8.1...v0.9.0)

---
updated-dependencies:
- dependency-name: pkg.package-operator.run/boxcutter
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

go.mod

@@ -45,7 +45,7 @@ require (
 	k8s.io/klog/v2 v2.130.1
 	k8s.io/kubernetes v1.34.0
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
-	pkg.package-operator.run/boxcutter v0.8.1
+	pkg.package-operator.run/boxcutter v0.9.0
 	sigs.k8s.io/controller-runtime v0.22.4
 	sigs.k8s.io/controller-tools v0.20.0
 	sigs.k8s.io/crdify v0.5.0

go.sum

@@ -810,8 +810,8 @@ k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzk
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
 oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=
-pkg.package-operator.run/boxcutter v0.8.1 h1:GoSXwI20s4WvFkOXq7xNlINzWmODBlA+2VMY7UflPFA=
-pkg.package-operator.run/boxcutter v0.8.1/go.mod h1:nk6XIcTS3i8WV1+GpaFwjPcNM+tK0jHczoa0qGnbUbk=
+pkg.package-operator.run/boxcutter v0.9.0 h1:uBypecAVb178RG5dL3Z3T85Ou/KSL0/4BiQTcHRTnqY=
+pkg.package-operator.run/boxcutter v0.9.0/go.mod h1:nk6XIcTS3i8WV1+GpaFwjPcNM+tK0jHczoa0qGnbUbk=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.33.0 h1:qPrZsv1cwQiFeieFlRqT627fVZ+tyfou/+S5S0H5ua0=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.33.0/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
 sigs.k8s.io/controller-runtime v0.22.4 h1:GEjV7KV3TY8e+tJ2LCTxUTanW4z/FmNB7l327UfMq9A=