Bump opencontainers/runc to v1.4.0

Signed-off-by: Renovate Bot <[email protected]>

Author: renovate-bot

embedded-bins/Makefile.variables

@@ -7,7 +7,7 @@ go_version = 1.25.4
 golang_buildimage=docker.io/library/golang:$(go_version)-alpine$(alpine_version)
 
 # renovate: datasource=github-releases depName=opencontainers/runc
-runc_version = 1.3.3
+runc_version = 1.4.0
 runc_buildimage = $(golang_buildimage)
 runc_build_go_tags = "seccomp"
 #runc_build_go_cgo_enabled =