Update go-yaml to v3.0.1

[darkowlzz]

Fix CVE-2022-28948

Trivy scan result:

┌──────────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────┐
│     Library      │ Vulnerability  │ Severity │ Installed Version │ Fixed Version │                          Title                          │
├──────────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────┤
│ gopkg.in/yaml.v3 │ CVE-2022-28948 │ HIGH     │ v3.0.0            │ v3.0.1        │ golang-gopkg-yaml: crash when attempting to deserialize │
│                  │                │          │                   │               │ invalid input                                           │
│                  │                │          │                   │               │ https://avd.aquasec.com/nvd/cve-2022-28948              │
└──────────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────┘

Looks like it was initially fixed in v3.0.0, which we updated to in fluxcd/kustomize-controller#665 and the associated PRs in all the repos, but then another fix was added in v3.0.1 go-yaml/yaml@f6f7691 .

[pjbgf]

LGTM