fix(security): use Chainguard fork of git-urls (2.8 pick)

fix(security): use Chainguard fork of git-urls (2.8 pick) #31932