Containerd - v1.6.13

* [release/1.6] Prepare release notes for v1.6.13 ([#7821](https://github.com/containerd/containerd/pull/7821)) * Prepare release notes for v1.6.13 * [release/1.6] support fetching containerd from non public GCS buckets ([#7823](https://github.com/containerd/containerd/pull/7823)) * disable tracing while handling token * support fetching containerd from non public GCS buckets * [release/1.6] nil check to avoid panic on upgrade ([#7820](https://github.com/containerd/containerd/pull/7820)) * nil check to avoid panic on upgrade * [release/1.6] concurrent map iteration and map write ([#7819](https://github.com/containerd/containerd/pull/7819)) * fatal error: concurrent map iteration and map write * [release/1.6] allow client to remove created tasks with PID 0 ([#7816](https://github.com/containerd/containerd/pull/7816)) * allow client to remove created tasks with PID 0 * [release/1.6] cri: make swapping disabled with memory limit ([#7815](https://github.com/containerd/containerd/pull/7815)) * cri: make swapping disabled with memory limit * [release/1.6] go.mod: Bump hcsshim to v0.9.6 ([#7808](https://github.com/containerd/containerd/pull/7808)) * Bump hcsshim to v0.9.6 * [release/1.6] Cherry pick GitHub actions workflow updates 1.6 ([#7713](https://github.com/containerd/containerd/pull/7713)) * update codeql-action to v2 * Upgrade actions/upload-artifact from v2 to v3 * Move up actions versions to prep for deprecation * CI: update GHA instances from Ubuntu 18.04 to 20.04 * Use global env variable to specify Go version on CI * Rework permission handling in scripts * fix pool_device_test.go * [release/1.6] fix: check for tmpfs when evaluating if userxattr should be used ([#7788](https://github.com/containerd/containerd/pull/7788)) * fix: check for tmpfs when evaluating if userxattr should be used