fix: use go-containerregistry to extract package.yaml

fix: use go-containerregistry to extract package.yaml #382