CVE-2026-16460 — bootc/ostree: staged deployments not revalidated against container signature policy before finalization

A flaw was found in bootc and ostree: already-staged deployments are finalized without revalidating the deployment’s container image against the current container signature policy.