ggcr: k8schain package depends on seemingly unmaintained ACR cred helper

[hugoShaka]

Describe the bug

The k8schain package depends on docker-credential-acr-env whose last release was 2 years ago and go module dependencies have not been updated since a year ago.

Some of its imported packages have known vulnerabilities, and even if the package itself does not rely on any vulnerable feature it still triggers some security scanners.

Additional context

Related to: #1042 (implementing it would not solve the fact the ACR cred helper is unmaintained, but it would avoid including it in the dependency tree by default)