vendor: containerd package version should be constrained since it is imported

[sboeuf]

pkg/oci/utils.go does import ""github.com/containerd/cri-containerd/pkg/annotations"", meaning this is a direct import, and that's why we should constraint this package in our vendoring.