Trivy found vulnerabilities in Docker CLI under golang.org/x

[patchwork01]

See workflow failure:

https://github.com/gchq/sleeper/actions/workflows/docker-cli-main.yaml
https://github.com/gchq/sleeper/actions/runs/29383750122/job/87252640333

usr/libexec/docker/cli-plugins/docker-buildx (gobinary)
=======================================================
Total: 2 (UNKNOWN: 2, LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 0)

┌───────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────┐
│      Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                        Title                        │
├───────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────┤
│ golang.org/x/net  │ CVE-2026-46600 │ UNKNOWN  │ fixed  │ v0.55.0           │ 0.56.0        │ Parsing an invalid SVCB or HTTPS RR can panic in    │
│                   │                │          │        │                   │               │ golang.org/x/net/dns/dnsmessage                     │
│                   │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-46600          │
├───────────────────┼────────────────┤          │        ├───────────────────┼───────────────┼─────────────────────────────────────────────────────┤
│ golang.org/x/text │ CVE-2026-56852 │          │        │ v0.37.0           │ 0.39.0        │ Infinite loop on invalid input in golang.org/x/text │
│                   │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56852          │
└───────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────┘

It looks like we'll need to ignore these as this is the latest version of the Docker CLI.