Advisories for Golang/Zotregistry.dev/Zot package

The group data stored for users in the boltdb database (meta.db) is an append-list so group revocations/removals are ignored in the API.

Cache driver GetBlob() allows read access to any blob without access control check