build(deps): move docker to 28.5 for testcontainers 0.44, tune groups

[rickstaa]

Split out of the grouped Dependabot updates because Dependabot cannot resolve it on its own.

testcontainers 0.44 requires go-connections 0.7, and docker/docker 27.3.1 does not build against it. docker/docker and docker/cli move to 28.5.2, the last release on this module path before the project moved to moby/moby. go-archive follows to 0.2.0. go.mod only.

Dependabot config changes, based on what the first grouped PRs did:

• gnark-crypto is grouped with go-ethereum in both streams and both are excluded from the routine minor-and-patch group. build(deps): bump the minor-and-patch group across 1 directory with 30 updates #4057 put go-ethereum in that group anyway, and build(deps): bump the security-updates group across 1 directory with 19 updates #4056 broke on gnark-crypto because it only builds against geth 1.17.
• go-tools is ignored: go-livepeer pins its minio branch, which has diverged from main, so every published tag is a downgrade. Tracked in Move go-tools from the minio branch to a tagged release #4054.
• docker/cli 29 is ignored until the AI worker moves to the moby/moby client, which it requires.
• ubuntu base image bumps are ignored entirely; build(deps): bump the docker group across 1 directory with 2 updates #4046 offered a non-LTS 24.10.

Build, all test packages, and the ai/worker and server suites pass locally.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 39.87771%. Comparing base (68f7fe7) to head (80910d3).

Additional details and impacted files

@@                 Coverage Diff                 @@
##              master       #4053         +/-   ##
===================================================
- Coverage   39.88785%   39.87771%   -0.01014%     
===================================================
  Files            174         174                 
  Lines          39413       39413                 
===================================================
- Hits           15721       15717          -4     
- Misses         23692       23696          +4     

see 2 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 68f7fe7...80910d3. Read the comment docs.
see 2 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[rickstaa]

@j0sh, tested make, test.sh, transcoding E2E, live-video-to-video E2E, live_runner E2E.