Bump Otel packages and split out versions

[baronfel]

The versions we have in-repo have CVEs that we need to update to mitigate:

• opentelemetry-dotnet advisories,
• opentelemetry-dotnet-contrib advisories

And per @martincostello's advice in dotnet/sdk#54156, we should split out the versions of the base Otel libraries and the dotnet-contrib libraries, because they can independently float.

[martincostello]

the dotnet-contrib libraries, because they can independently float

To be more slightly more concrete, the first two versions (with our current release process) from the opentelemetry-dotnet repo will always match. The latter two just happen to match right now - they can be released independently.

The recent GHSAs patched a vulnerability in OpenTelemetry.Api so we rebuilt everything, so the versions happened to be more coherent than they can be.