Docker Layer 2 ICC Bug vs Xcitium Kubernetes Security Posture Management (2026)