v1.35.5 release

What's Changed

• [release-1.35] fix: CVE-2026-25680 by @andyzhangx in #3222
• [release-1.35] chore: update CSI sidecar images to latest versions by @andyzhangx in #3233
• [release-1.35] cleanup: add validation on volumeid by @k8s-infra-cherrypick-robot in #3236
• [release-1.35] chore: raise kube-api-qps/burst on snapshot-controller and csi-snapshotter by @andyzhangx in #3241
• [release-1.35] Dev/rnhan/workload identity sovereign clouds by @k8s-infra-cherrypick-robot in #3243
• doc: cut v1.35.5 release by @rnhan in #3244

Full Changelog: v1.35.4...v1.35.5