v1.25.3 release

What's Changed

• [release-1.25] test: fix CVE-2025-22866 in trivy action by @k8s-infra-cherrypick-robot in #1823
• [release-1.25] fix: incorrect affinity chart config by @andyzhangx in #1828
• [release-1.25] fix: CVE-2025-0426 by @andyzhangx in #1835
• [release-1.25] feat: optimize azcopy perf in volume cloning scenario by @andyzhangx in #1840
• [release-1.25] feat: install blobfuse 2.4.1 as default version by @andyzhangx in #1844
• [release-1.25] fix: cleanup azcopy jobs after job complete by @k8s-infra-cherrypick-robot in #1850
• [release-1.25] feat: upgrade aznfs package to v2.0.11 by @k8s-infra-cherrypick-robot in #1856
• [release-1.25] fix: storageEndpoint issue in sovereign cloud by @andyzhangx in #1865
• [release-1.25] fix: incomplete azcopy job state during volume clone by @k8s-infra-cherrypick-robot in #1859
• doc: cut v1.25.3 release by @andyzhangx in #1868

Full Changelog: v1.25.2...v1.25.3