[2.14] fix cves in docker client library + go-jwt + bump golang version

[thatmidwesterncoder]

Issue: rancher/rancher#55282

Parent Issue: rancher/rancher#55284

Bumping a few things to lower the CVE count, notably:

• docker/docker library
• go-jwt library
• golang version to latest minor

[Copilot]

Pull request overview

Updates module/toolchain dependencies to reduce reported CVEs, including bumping the Docker client library and go-jwt, with a small code adjustment to match the newer Docker API types.

Changes:

• Bump github.com/docker/docker from v25.0.8 to v28.5.2 and update ImagePull options type usage accordingly.
• Bump github.com/golang-jwt/jwt/v4 from v4.5.0 to v4.5.2.
• Bump Go toolchain patch version from go1.25.7 to go1.25.10 and refresh go.sum for new transitive dependencies.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
libmachine/mcndockerclient/docker_client.go	Updates Docker client imports/types for ImagePull with the newer Docker library version.
go.mod	Bumps Docker + JWT dependencies and updates Go toolchain patch version.
go.sum	Updates checksums to match the dependency bumps and new transitive modules.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.