Suppress new Jetty CVEs in Dependency-Check report for pinned Jetty 10

[Copilot]

Dependency-Check in workflow 25992352648 reported new Jetty vulnerabilities while this project remains on Jetty 10. This PR updates the suppression rules to ignore those newly reported Jetty CVEs in the existing suppression policy.

• Scope

  • Updated suppression.xml only; no dependency/version changes.

• Suppression updates

  • Added Jetty-wide suppressions (existing packageUrl pattern) for:
    • CVE-2026-2332
    • CVE-2026-5795
  • Reused the current rationale and matching strategy used for prior Jetty EOL suppressions.

• Resulting rule shape

  • New entries follow the existing structure:

<suppress>
  <notes><![CDATA[
    Jetty 10 is EOL, therefore no updates.
  ]]></notes>
  <packageUrl regex="true">^pkg:maven/org\.eclipse\.jetty/jetty-.*$</packageUrl>
  <vulnerabilityName>CVE-2026-2332</vulnerabilityName>
  <cve>CVE-2026-2332</cve>
</suppress>