Bump cni plugins

[brandond]

Proposed Changes

• Bump CNI plugins to v1.9.0
  Addresses CVE-2025-67499
• Bump flannel to v0.28.0
• Drop use of deprecated docker reexec pkg (same change has been made to rancher fork of containernetworking/plugins)

Types of Changes

Version bump

Verification

cni --version
flannel --version

Testing

yes

Linked Issues

• Bump CNI plugin versions #13444

User-Facing Change

Further Comments

[brandond]

cc @thomasferrandiz @rbrtbnfgl

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 21.59%. Comparing base (2ef2865) to head (f347aa9).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #13439      +/-   ##
==========================================
- Coverage   21.60%   21.59%   -0.01%     
==========================================
  Files         189      189              
  Lines       15382    15382              
==========================================
- Hits         3323     3322       -1     
- Misses      11606    11607       +1     
  Partials      453      453              

Flag	Coverage Δ
unittests	21.59% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[rbrtbnfgl]

Do we need to release the new version here https://github.com/rancher/plugins ?
Edit: I found the new tag never mind