Review spec links in the code comments

We should check the tag version in the spec links and see if we can update them to the latest.
Related PR comment: https://github.com/oras-project/oras-go/pull/553#discussion_r1271996424