v1.26.3 release

What's Changed

• [release-1.26] test: fix CVE-2025-22871 in trivy action by @k8s-infra-cherrypick-robot in #1934
• [release-1.26] fix: allow clientID, tenantID workload identity parameters in storage class by @k8s-infra-cherrypick-robot in #1941
• [release-1.26] cleanup: remove deprecated wait.PollImediate function by @k8s-infra-cherrypick-robot in #1945
• [release-1.26] fix: goroutine leak when timeout by @andyzhangx in #1948
• [release-1.26] fix: CVE-2025-22872 by @andyzhangx in #1952
• [release-1.26] fix: grpc connection was not closed properly by @k8s-infra-cherrypick-robot in #1955
• [release-1.26] cleanup: revert to go1.23 by @andyzhangx in #1969
• [release-1.26] fix: incorrect metris log in NodeStageVolume by @k8s-infra-cherrypick-robot in #1966
• [release-1.26] chore: upgrade azcopy to v10.29.0 by @k8s-infra-cherrypick-robot in #1975
• [release-1.26] chore: upgrade Azure cloud provider lib by @andyzhangx in #1986
• [release-1.26] feat: add VNetLinkName and PublicNetworkAccess in account creation by @andyzhangx in #1991
• [release-1.26] fix: add mountWithWorkloadIdentityToken parameter by @andyzhangx in #1992
• [release-1.26] cleanup: disable version check in blobfuse2 driver by default by @k8s-infra-cherrypick-robot in #1997
• doc: cut v1.26.3 release by @andyzhangx in #1999

Full Changelog: v1.26.2...v1.26.3