introduce config --lock-image-digests

Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>

build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0

Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.32.0 to 0.33.0.
- [Commits](golang/sys@v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

go.mod: bump github.com/docker/cli v28.1.0

full diff: docker/cli@v28.0.4...v28.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

mount API is not strictly equivalent to bind

Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>

bump compose-go to version v2.4.9

Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>

add support for gw_priority, enable_ipv4 (requires docker v28.0)

This adds support for the GwPriority API field in API v1.48 (docker v28.0).
It can be set on both docker container run and docker network connect.

This option is used by the Engine to determine which network provides
the default gateway for a container.

It also adds support for enable_ipv4, which allows enabling (default)
or disabling IPv4 address assignment for a network.

Co-authored-by: Nicolas De Loof <nicolas.deloof@gmail.com>
Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

go.mod: remove toolchain directive

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

add missing tag for build during merge workflow

Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>

ci: update bake-action to v6

Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>

remove engine v25 from e2e test matrix

The 1st version available for Ubuntu 24.x is Docker Engine v26

Signed-off-by: Guillaume Lours <705411+glours@users.noreply.github.com>