fix: ensure eicweb and ghcr oci buildcache are used for fetch too

I noticed we only list the OCI buildcaches as push targets, not fetch/pull targets. It is possible that this has meant that we have been pulling from S3 when we should have been pulling from eicweb.

This PR adds fetch targets to the OCI buildcaches which should lead to eicweb being pulled preferentially.

Note: this also adds an upgrade to Qt because only changing secrets doesn't invalidate layer caches so nothing new is done to test that this works.

assigned to @wdconinc

enabled an automatic merge when the pipeline for 5cbe62f4 succeeds

aborted the automatic merge because target branch was updated

added 3 commits

• 5cbe62f4...dc3d50af - 2 commits from branch master
• fb10678c - fix: ensure eicweb and ghcr oci buildcache are used for fetch too

Compare with previous version

added 1 commit

• fd310fb0 - chore: qt-5.15.12

Compare with previous version

changed the description

enabled an automatic merge when the pipeline for fd310fb0 succeeds

merged