Fix vulnerabilities:

kube-bench Go binary

CVE-2026-33816 CRITICAL
CVE-2026-25679 HIGH
CVE-2026-27137 HIGH
CVE-2026-32280 HIGH
CVE-2026-32281 HIGH
CVE-2026-32283 HIGH
CVE-2026-33810 HIGH
CVE-2026-27142 MEDIUM
CVE-2026-32282 MEDIUM
CVE-2026-32288 MEDIUM
CVE-2026-32289 MEDIUM
CVE-2026-27138 LOW
CVE-2026-27139 LOW
GHSA-j88v-2chj-qfwx LOW

kubectl Go binary (eliminated by switching kubectl to distro package)

CVE-2026-35469 HIGH
CVE-2026-25679 HIGH
CVE-2026-32280 HIGH
CVE-2026-32281 HIGH
CVE-2026-32283 HIGH
CVE-2026-27142 MEDIUM
CVE-2026-32282 MEDIUM
CVE-2026-32288 MEDIUM
CVE-2026-32289 MEDIUM
CVE-2026-27139 LOW

Alpine OS layer

CVE-2026-31789 CRITICAL
CVE-2026-28387 HIGH
CVE-2026-28388 HIGH
CVE-2026-28389 HIGH
CVE-2026-28390 HIGH
CVE-2026-40200 HIGH
CVE-2026-22184 HIGH
CVE-2026-31790 MEDIUM
CVE-2026-6042 MEDIUM
CVE-2026-27171 MEDIUM
CVE-2026-2673 LOW