Fix CVE-2026-34040 and CVE-2026-33997 vulnerabilities in Moby

[palade]

Description

This PR addresses two critical security vulnerabilities in the Moby engine:

• CVE-2026-34040: Fixed AuthZ plugin bypass vulnerability that occurred when processing oversized request bodies
• CVE-2026-33997: Resolved off-by-one error in plugin privilege validation that could lead to privilege escalation

Upgraded to Moby v29.0.0 as per the official release notes

These changes ensure proper authorization validation and eliminate potential security bypasses in plugin handling mechanisms.

References: https://github.com/moby/moby/releases/tag/docker-v29.0.0

Fixes # (issue)

Any Newly Introduced Dependencies

Updated to use non-deprecated Go modules: migrated from github.com/docker/docker to github.com/moby/moby/client and github.com/moby/moby/api

How Has This Been Tested?

ci

Checklist:

• I agree to use the APACHE-2.0 license for my code changes
• I have not introduced any 3rd party dependency changes
• I have performed a self-review of my code