New Syft images should automatically be mirrored to the public cache ACR

[lbussell]

Related: #4545, #5724

In dependency update PRs that update the Syft image tag, all PR validation legs will fail since the new Syft image has not been uploaded to the cache ACR. For example, #5846.

The current workaround is to open a cloud shell and mirror the image manually:

# Find the correct subscription ID
az account list | Select-String "$TEAM_NAME" -Context 5

az account set --subscription $SUBSCRIPTION_ID
az acr import -n $CACHE_ACR_NAME --source docker.io/anchore/syft:$TAG