fix: rebase onto main, drop fork replace, bump scalibr, update AlmaLinux snapshot

- Rebase onto upstream/main (includes snapshot refresh #2920, #2921)
- Drop go.mod replace directive: google/osv-scalibr#2250 (AlmaLinux VERSION_ID
  trim) is now merged upstream
- Bump osv-scalibr to v0.4.6-0.20260713000915-500ad84f4ed1 (official upstream)
- Regenerate TestCommand_OCIImage_JSONFormat/scanning_almalinux_9_image snapshot
  and cassette with updated scalibr

Author: herdiyana256