🐛 util/image: unset PAXRecords and Xattrs when applying files

[joelanford]

Description

If a catalog or bundle image contains files with xattrs, that can cause the controller to fail to unpack the image. This PR unsets those attributes to avoid permission errors when writing files to disk.

Reviewer Checklist

• API Go Documentation
• Tests: Unit Tests (and E2E Tests, if appropriate)
• Comprehensive Commit Messages
• Links to related GitHub Issue(s)

[netlify]

✅ Deploy Preview for olmv1 ready!

Name	Link
🔨 Latest commit	83cf868
🔍 Latest deploy log	https://app.netlify.com/sites/olmv1/deploys/67c127272027ef00082075bc
😎 Deploy Preview	https://deploy-preview-1823--olmv1.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.44%. Comparing base (a6de9f9) to head (83cf868).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1823      +/-   ##
==========================================
+ Coverage   68.43%   68.44%   +0.01%     
==========================================
  Files          63       63              
  Lines        5132     5134       +2     
==========================================
+ Hits         3512     3514       +2     
  Misses       1390     1390              
  Partials      230      230              

Flag	Coverage Δ
e2e	51.57% <100.00%> (+0.02%)	⬆️
unit	56.03% <100.00%> (+0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[camilamacedo86]

I think the proposed solution is a good approach.
We address the problem when unpacking the image, and from that point on, it's up to the solution itself to determine whether it has the necessary capabilities to run whatever it needs to. We are not modifying it at all.

So, if my understanding is correct:

/lgtm
/approve