v1.35.4 release

What's Changed

• [release-1.35] test: skip workload identity setup for Windows/intree/migration e2e tests by @k8s-infra-cherrypick-robot in #3174
• [release-1.35] test: skip MI role and WI setup for Windows/intree/migration e2e tests by @k8s-infra-cherrypick-robot in #3177
• [release-1.35] test: fix inline volume e2e tests flaky failure by @k8s-infra-cherrypick-robot in #3183
• [release-1.35] chore(deps): bump build-image/debian-base from bookworm-v1.0.7 to bookworm-v1.0.8 in /pkg/azurefileplugin by @k8s-infra-cherrypick-robot in #3186
• [release-1.35] fix: normalize folderName "/" as root (empty string) by @k8s-infra-cherrypick-robot in #3192
• [release-1.35] chore: bump Go version to 1.25.11 in trivy workflow by @k8s-infra-cherrypick-robot in #3199
• [release-1.35] fix: CVE-2026-35469 by @andyzhangx in #3204
• [release-1.35] fix: CVE-2026-41326 by @k8s-infra-cherrypick-robot in #3208
• [release-1.35] chore: add requiresRepublish to v1.35.3 helm chart by @andyzhangx in #3215
• [release-1.35] fix: skip unmount in ensureMountPoint to prevent stale mount cleanup race by @k8s-infra-cherrypick-robot in #3214
• doc: cut v1.35.4 release by @andyzhangx in #3216

Full Changelog: v1.35.3...v1.35.4