[windows] Unable to docker pull a bundle/image built by imgpkg

**What steps did you take:**

```
> /d/a/carvel-imgpkg/carvel-imgpkg/src/github.com/vmware-tanzu/carvel-imgpkg/imgpkg.exe push -f test/e2e/assets/bundle_file_permissions -b ttl.sh/test-windows-push

> docker pull ttl.sh/test-windows-push
Using default tag: latest
latest: Pulling from test-windows-push
2021be6dac15: Pulling fs layer
2021be6dac15: Download complete
failed to register layer: re-exec error: exit status 1: output: Failed to safefile.OpenRelative failed in Win32: open \\?\C:\ProgramData\docker\windowsfilter\7ed8e54268e4f0fa8936c3bdd59099add574d434fc8d221542419c4ea806f193: The filename, directory name, or volume label syntax is incorrect. (0x1f) .
```

**What happened:**
docker pull failed with an error

**What did you expect:**
docker pull to succeed

**Anything else you would like to add:**
Similar issue encountered in ko
- https://github.com/google/ko/issues/361
- https://dfir.ru/2020/08/15/containerized-registry-hives-in-windows/

Look into making an upstream contrib to ggcr:
- https://github.com/google/go-containerregistry/issues/1111

**Environment:**

- imgpkg version (use `imgpkg --version`): 0.20.0
- Docker registry used (e.g. `Docker HUB`): ttl.sh
- OS (e.g. from `/etc/os-release`): Microsoft Windows Server 2019

---
Vote on this request

This is an invitation to the community to vote on issues, to help us prioritize our backlog. Use the "smiley face" up to the right of this comment to vote.

👍 "I would like to see this addressed as soon as possible"
👎 "There are other more important things to focus on right now"

We are also happy to receive and review Pull Requests if you want to help working on this issue.