[2300] Attachment locking for proxy VMs

[meghansh-pf9]

What this PR does / why we need it

Added a locking mechanism for vJailbreak accelerated copy, to prevent vcenter side errors

Which issue(s) this PR fixes

(optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged)

fixes #2300

Testing Notes

No failing calls during attachment on vcenter

[github-actions]

🚨 Security Vulnerability Summary

Security posture degraded

📊 Overall Changes

Metric	Count
Total Added	2
Total Fixed	0
Net Change	+2

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
92	90	2	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

🚨 Added Vulnerabilities

Trivy (Dependencies) - 2 Added

Target: pkg/vpwned/go.mod
Package: golang.org/x/mod v0.29.0
Vulnerability: CVE-2026-56864
Severity: HIGH
Title: A malicious GOSUMDB was capable of serving arbitrary module content no ...

Target: pkg/vpwned/go.mod
Package: golang.org/x/mod v0.29.0
Vulnerability: CVE-2026-56865
Severity: HIGH
Title: A malicious GOPROXY was previously capable of forging up to two sumdb ...

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: f1081763de23261ca55f1a09823aa923517cc140

[spai-p9]

question here, if this happens for attach, will it happen for dettach as well? has that case been covered?

[github-actions]

✅ Security Vulnerability Summary

No change in security posture

📊 Overall Changes

Metric	Count
Total Added	0
Total Fixed	0
Net Change	0

🔍 Detailed Breakdown

📦 Gosec (Static Analysis)

Current	Baseline	Added	Fixed	Method
0	0	0	0	artifact

📦 Trivy (Dependency Scan)

Current	Baseline	Added	Fixed	Method
92	92	0	0	artifact

📋 Baseline Methods

• 📦 artifact: Used stored report from main branch
• 🔄 live_scan: Scanned base branch in real-time
• ⚠️ no_baseline: No baseline available (all vulnerabilities treated as new)

---

Only HIGH and CRITICAL severity vulnerabilities are tracked
Baseline: 29134c894d55e8571260619b87ca0ea4b68b84e8