chore: add OCI annotations

This is useful to allow Dependabot to fetch Docker metadata:
https://docs.github.com/en/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories#docker

See the specification:
https://specs.opencontainers.org/image-spec/annotations/