chore(security): ignore newly reported base CVEs

Trivy DB picked up new HIGH-severity Go stdlib, otel, go-git and
containerd advisories in the bundled CLIs and base image, breaking
the release scan. Track them in .trivyignore with the existing
2026-08-19 expiration so the next runner/toolchain refresh forces a
re-evaluation.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: miragecentury

.trivyignore

@@ -70,3 +70,15 @@ CVE-2026-32281 exp:2026-08-19
 CVE-2026-32283 exp:2026-08-19
 CVE-2026-33810 exp:2026-08-19
 CVE-2026-35469 exp:2026-08-19
+CVE-2026-29181 exp:2026-08-19
+CVE-2026-33811 exp:2026-08-19
+CVE-2026-33814 exp:2026-08-19
+CVE-2026-39820 exp:2026-08-19
+CVE-2026-39823 exp:2026-08-19
+CVE-2026-39825 exp:2026-08-19
+CVE-2026-39836 exp:2026-08-19
+CVE-2026-42499 exp:2026-08-19
+CVE-2026-42504 exp:2026-08-19
+CVE-2026-44973 exp:2026-08-19
+CVE-2026-45022 exp:2026-08-19
+CVE-2026-46680 exp:2026-08-19