update generic deps (#452)
run `go get -u <pkg>` manually for a bunch of our direct deps.
did not bite off the large upgrade to IPFS `boxo`. I tried doing that
partially and it worked ok, but we should upgrade from `ipfs/go-car` to
`ipfs/go-car/v2` everywhere first to really take advantage of it,
otherwise we are left with a dual dependency tree with stuff like ipns,
bitswap, and unixfs still sticking around.
AFAIK `ipfs/go-car/v2` works fine (we use it in a few places), but the
API isn't directly compatible.