[v0.57] Backport pkg/subscriptions: use securejoin for the container path + new 0.57.7 release

[Luap99]

If we join a path from the container image we must always use securejoin to prevent us from following a symlink onto the host.

Fixes CVE-2024-9341 Needed for: https://issues.redhat.com/browse/RHEL-60964 https://issues.redhat.com/browse/RHEL-60962 https://issues.redhat.com/browse/RHEL-61116 https://issues.redhat.com/browse/RHEL-61113

[Luap99]

@mheon PTAL and merge please

[kwilczynski]

/approve /lgtm

[openshift-ci[bot]]

@kwilczynski: changing LGTM is restricted to collaborators

In response to [this](https://github.com/containers/common/pull/2187#issuecomment-2388566006): >/approve >/lgtm Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.

[openshift-ci[bot]]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kwilczynski, Luap99

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/containers/common/blob/v0.57/OWNERS)~~ [Luap99] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

[rhatdan]

/lgtm