Docker Hub Moved the PAT. The Secret Did Not. Docker says CVE-2026-105445 reassigned a Hub token without rotating the secret. The fix landed Sept. 30. The deactivation email's exception is Oct. 8. docker