Cve fixes

[bhatturu]

• Dockerfiles: bump Go 1.26 → 1.26.7, use docker.io/rocm/ registry
• Makefile: use docker.io/rocm/ defaults, add verify-go-versions target
• go.mod/go.sum + vendor/: dependency bumps (golang.org/x/net, otel, grpc, protobuf)
• hack/verify-go-versions: Go version validation script

Motivation

Technical Details

Test Plan

Test Result

Submission Checklist

• Look over the contributing guidelines at https://github.com/ROCm/TheRock/blob/main/GOVERNANCE.md#pull-requests.

[bhatturu]

 run]
ok      github.com/kubernetes-sigs/kernel-module-management/internal/registry   0.077s
ok      github.com/kubernetes-sigs/kernel-module-management/internal/sign       0.050s
ok      github.com/kubernetes-sigs/kernel-module-management/internal/sign/pod   0.047s
ok      github.com/kubernetes-sigs/kernel-module-management/internal/statusupdater      0.040s
?       github.com/kubernetes-sigs/kernel-module-management/internal/test       [no test files]
ok      github.com/kubernetes-sigs/kernel-module-management/internal/utils      0.102s
ok      github.com/kubernetes-sigs/kernel-module-management/internal/webhook    0.041s
?       github.com/kubernetes-sigs/kernel-module-management/internal/webhook/hub        [no test files]
ok      github.com/kubernetes-sigs/kernel-module-management/internal/worker     0.070s
ok      github.com/kubernetes-sigs/kernel-module-management/pkg/labels  0.040s
?       github.com/kubernetes-sigs/kernel-module-management/tools/build/copyright       [no test files]
FAIL
BUILD manager OK
BUILD webhook OK
BUILD worker OK

[spraveenio]

Lgtm