ci: remove duplicate actions, use finch-core (#511)

finch-core already defines scripts for updating some dependencies:

https://github.com/runfinch/finch-core/blob/main/bin/update-deps.sh


Since this repo takes finch-core as a submodule, some actions can be
consolidated to this one for dependency updates.

CORE_URL is unused and that behavior is removed.

Issue #, if available:

*Description of changes:*

*Testing done:*



- [x] I've reviewed the guidance in CONTRIBUTING.md


#### License Acceptance

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.

Signed-off-by: Gavin Inglis <[email protected]>

.github/workflows/sync-submodules.yaml → .github/workflows/sync-submodules-and-deps.yaml

@@ -1,4 +1,4 @@
-name: Sync Submodules
+name: Sync Submodules and Dependencies
 
 # Pulls changes from the main branch of submodules daily at 9:00 UTC and opens a PR.
 on:
@@ -15,14 +15,26 @@ jobs:
         with:
           submodules: recursive
           token: ${{ secrets.GITHUB_TOKEN }}
-      - name: Update sub modules
+
+      - name: Update submodules
         run: |
           git submodule update --remote
+
+      - name: Update OS image
+        run: |
           ./.github/bin/update-os-image.sh
 
+      - name: Update lima dependencies url
+        run: |
+          ./deps/finch-core/bin/update-deps.sh -d ${{ secrets.DEPENDENCY_BUCKET_NAME }}
+
+      - name: Update rootfs
+        run: |
+          ./deps/finch-core/bin/update-rootfs.sh -d ${{ secrets.DEPENDENCY_BUCKET_NAME }}
+
       - name: Create PR
         uses: peter-evans/create-pull-request@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           signoff: true
-          title: 'build(deps): Bump submodules'
+          title: 'build(deps): Bump submodules and dependencies'