Addressed issues

Issues addressed in the MKE 3.9.6 release include:

• [MKE-14476][FIELD-8328] Resolved an issue wherein the Docker Content Trust (DCT) deprecation banner was displayed to all administrators regardless of their signature enforcement configuration. The banner now displays only when DCT is actively enforced; clusters using Cosign or no signature enforcement will no longer see the DCT deprecation warning.

• [FIELD-8302] Fixed an issue wherein worker-scheduled components failed to pull the target image from a private registry during upgrades using the --manual-worker-upgrade flag.

• [FIELD-8266] Fixed an issue wherein calico-node Pods were restarted due to a new calico-node DaemonSet revision rollout that occurs whenever the ucp-cluster-agent is rescheduled to a different manager node.