build(deps): bump oras from 0.2.33 to 0.2.37

Bumps [oras](https://github.com/oras-project/oras-py) from 0.2.33 to 0.2.37.
- [Release notes](https://github.com/oras-project/oras-py/releases)
- [Changelog](https://github.com/oras-project/oras-py/blob/main/CHANGELOG.md)
- [Commits](https://github.com/oras-project/oras-py/compare/0.2.33...0.2.37)

---
updated-dependencies:
- dependency-name: oras
  dependency-version: 0.2.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

requirements.txt

@@ -13,7 +13,7 @@ GitPython == 3.1.44    # for manipulating git repos
 unidecode == 1.4.0     # for converting strings to ascii
 coloredlogs == 15.0.1  # for colored logging
 PyYAML == 6.0.2        # for parsing/writing YAML
-oras == 0.2.33         # for OCI stuff in mapper-oci-update
+oras == 0.2.37         # for OCI stuff in mapper-oci-update
 Jinja2 == 3.1.6        # for templating
 rich == 14.0.0         # for rich text formatting
 dtschema == 2025.6.1     # for checking dts files and dt bindings