accept newline-delimited packages and replaces

[imjasonh]

strings.Fields splits on any whitespace, including newlines

Example: https://go.dev/play/p/kp9y44Cg4aU

This enables something like:

- uses: go/bump
  with:
    packages: |
      foo.com/[email protected]
      bar.com/[email protected]

[hectorj2f]

Nit: there is not packages: field is deps:

[hectorj2f]

I'd like we add a test to validate the automation using it, as mentioned here https://chainguard-dev.slack.com/archives/C0636FTRFED/p1736446978629539?thread_ts=1736446317.594579&cid=C0636FTRFED, so we don't break anything that relies on deps: today

[debasishbsws]

this will be great if the automation also start using this format.

[hectorj2f]

LGTM, let's try this syntax first on wolfi-bump.

[mamccorm]

related: #2