fix(nvca): bump distroless/go base image to v4.1.4 on v3.2

[apartha-nv]

Summary

• nvca, nvca-operator, and cluster-validator 3.2.25 images all fail the nSpect LaunchAPI container-oss-vulns-out-of-sla gate with an identical 9 count.
• govulncheck shows 0 code-reachable Go vulnerabilities (post fix(nvca): bump grpc to remediate container OSS vuln SLA failures on v3.2 #2118 grpc bump).
• trivy, scanning the distroless/go:v4.0.8 base image SBOM against Debian's own vendor security tracker, also shows 0 vulnerabilities across all 9 packages.
• Since the count is identical across all three images (including cluster-validator, which doesn't use grpc), this points to the shared base OS layer — most likely raw-NVD version matching flagging Debian backport patches (+deb13uN) that vendor-aware scanners already treat as fixed.

Change

• Bump distroless_go base image pin from v4.0.8 → v4.1.4 (latest, same family). Picks up newer libc6, libssl3t64/openssl-provider-fips, and tzdata patch versions, which may shift past whatever version nSpect's NVD matcher is keying on.
• trivy scan of the v4.1.4 SBOM also reports 0 vulnerabilities.

Test plan

• bazel build //src/compute-plane-services/nvca/cmd/{nvca,nvca-operator,cluster-validator} succeeds
• Re-run nSpect LaunchAPI on the next cut tag to confirm the SLA gate clears

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

🗂️ Base branches to auto review (1)

• main

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: NVIDIA/nvcf/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f7d23871-f8e8-4886-8939-a46213d33158

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}