ci(updatecli): add policies autodiscovery, bump updatecli version and specs/jsons policies

[v1v]

What

• Use the latest updatecli version for now
• Update policies for the specs/jsons
• Enable updatecli policies autodiscovery (but use the previous latest one, so I can test this PR)

Why

Otherwise, elastic/apm-agent-go#1671 won't work

🐔 🥚 since https://github.com/updatecli/updatecli/releases/tag/v0.86.0

Sources were always executed before conditions and then targets.
With this change, sources, conditions, and targets can now depend on any other resource type to allow an advanced update scenario.

And there are errors like

target: target#agent-json-specs ----------------------- **Dry Run enabled** The shell 🐚 command "/bin/sh /tmp/updatecli/bin/68b2939c124c411192667268d8f6edefbaa79f085494796eb8122c21afdb37bf.sh" exited on error (exit code 2) with the following output: ---- ---- command stderr output was: ---- tar (child): /home/runner/work/apm-agent-go/apm-agent-go/json-specs.tgz: Cannot open: No such file or directory 

Test

See https://github.com/elastic/apm-agent-python/actions/runs/12118632644