Cross-compile with a current Go toolchain (fixes stdlib CVEs of the old
image, e.g. CVE-2025-68121), append onto a pinned distroless base with
crane, publish to git.cyrilix.bzh/cyrilix/pod-volume-cleaner and upload a CycloneDX
SBOM to DependencyTrack.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>