fix: remediate scanner dependency vulnerabilities

[yuzichen12123]

Summary

• Update vulnerable Go dependencies including containerd, OpenTelemetry, golang.org/x/crypto, and related transitive modules.
• Align github.com/docker/docker to the Moby 28.x pseudo-version that contains the AuthZ backports.
• Add .trivyignore entries for docker/docker advisories that are already fixed in that pseudo-version.

Verification

• GOTOOLCHAIN=auto GOPROXY=https://proxy.golang.org,direct go test ./...
• trivy fs --ignorefile .trivyignore go.mod with HIGH,CRITICAL severity: 0 vulnerabilities.
• docker/docker MEDIUM,HIGH,CRITICAL hits under .trivyignore policy: 0.