fix: docker saveでOCI形式からjq+tar+gunzipでuvバイナリを抽出

docker cp/runはcontainerd v2のmanifest unknownバグで失敗するため、
docker saveでローカルtarを取り出しOCI形式のblobs/sha256/を
jq+tar+gunzipで辿ってuvバイナリを抽出する方式に変更。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: massongit

scripts/deploy_hato_bot/update_uv_version/get_uv_version.sh

@@ -3,9 +3,18 @@ set -e
 
 image_tag=ghcr.io/dependabot/dependabot-updater-uv
 docker pull "$image_tag"
-tmp_container=$(docker create "$image_tag")
-docker cp "${tmp_container}:/usr/local/bin/uv" /tmp/uv
-docker rm "${tmp_container}"
+tmp_tar=$(mktemp)
+trap 'rm "$tmp_tar"' EXIT
+docker save "$image_tag" -o "$tmp_tar"
+manifest_digest=$(tar -xOf "$tmp_tar" index.json | jq -r '.manifests[0].digest' | sed 's/sha256://')
+
+for digest in $(tar -xOf "$tmp_tar" "blobs/sha256/$manifest_digest" | jq -r '.layers[].digest' | sed 's/sha256://'); do
+    if tar -xOf "$tmp_tar" "blobs/sha256/$digest" 2>/dev/null | gunzip 2>/dev/null | tar -xOf - usr/local/bin/uv 2>/dev/null >/tmp/uv && [ -s /tmp/uv ]; then
+        chmod +x /tmp/uv
+        break
+    fi
+done
+
 uv_version=$(/tmp/uv --version | sed -e 's/^uv //g')
 rm /tmp/uv
 sed -i -e "s/required-version = .*/required-version = \"$uv_version\"/g" pyproject.toml