chore(velero): bump system/velero images to current upstream release #2886

Bump the system/velero package to the latest upstream release.

The currently pinned images carry outdated packages with published security fixes: github.com/containerd/containerd (2), helm.sh/helm/v4 (2), urllib3 (2), pyasn1 (2), libexpat (2), curl, nghttp2-libs, github.com/moby/spdystream, github.com/go-jose/go-jose/v4, github.com/antchfx/xpath, github.com/buger/jsonparser, stdlib — 17 known CVEs total.

Routine maintenance bump: verify with helm template / helm lint and a dev-cluster deploy.