v1.4.3-k3s4

fix for image volumes under selinux (#10)

Pull in a fix for containerd/cri that pulls in a fix for containerd/continuity: when copying directories for image volumes we should filter out the security.selinux xattr key because the target has been correctly relabeled already (and image volumes are copying from layer storage which has a read-only selinux context).

Upstream PR(s) for 1.5.x:
- https://github.com/containerd/continuity/pull/178
- https://github.com/containerd/containerd/pull/5104

Addresses:
- rancher/rke2#690

Signed-off-by: Jacob Blain Christen <jacob@rancher.com>