We found two issues with guest-components:

1. image-rs: check xattrs for target dir when image unpacking:
  - https://github.com/confidential-containers/guest-components/pull/691

2. image-rs tokio-tar dependency: fix: add support for long link names:

 - https://github.com/edera-dev/tokio-tar/pull/2

In case we don't have thos merge in time, and propagated to the kata-containers repository so we can cherry pick, we need to accommodate them downstream in our vendors structure.