ci(update-deps): switch to create-pull-request action to fix api limitation

[crazy-max]

relates to https://github.com/docker/github-builder/actions/runs/24467298383/job/71497793788#step:3:420

Resolved SBOM_IMAGE to docker/buildkit-syft-scanner:1.11.0 from https://github.com/docker/buildkit-syft-scanner/releases/latest
GET /repos/docker/github-builder/git/ref/heads%2Fdeps%2Fsbom-image - 404 with id C01B:206F67:35813FA:D9F84F8:69DFC3AA in 164ms
POST /repos/docker/github-builder/git/trees - 403 with id C01B:206F67:3581CD4:D9FA95C:69DFC3AB in 300ms
RequestError [HttpError]: Resource not accessible by integration - https://docs.github.com/rest/git/trees#create-a-tree

The workflow now passes the branch and PR metadata to create-pull-request action to fix the GitHub API limitation.