Docker Layer 2 ICC Bug vs Sysdig Container and Kubernetes Security (2026)