Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>

Removed redirects no longer needed and bumped dependencies:
- github.com/fluxcd/image-reflector-controller/api to version 0.22.0.
- github.com/fluxcd/pkg/apis/meta to version 0.16.0.
- github.com/fluxcd/pkg/runtime to version 0.19.0.
- golang.org/x/crypto to version 0.0.0-20220926161630-eccd6366d1be.
- k8s.io/api to version 0.25.2.
- k8s.io/apimachinery to version 0.25.2.
- k8s.io/client-go to version 0.25.2.
- k8s.io/kube-openapi to version 0.0.0-20220927161751-b7a9e6fe3bb6.
- sigs.k8s.io/controller-runtime to version 0.13.0.

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>

The libgit2 libraries are downloaded and verified before
some of the make targets are executed. This assures the
provenance of such files before using them and is very
important specially for end users running such tests on
their machines.

Note that has been disabled specially due to recent issues
we experienced at CI which can be seen in:
fluxcd/source-controller#899

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>

Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>