Merge tag 'pull-nbd-2026-11-10-v2' of https://gitlab.com/ebblake/qemu into staging

NBD patches through 2026-11-10

A few bug fixes:
- Eric Blake: fix two low-severity CVEs with non-compliant NBD clients

# -----BEGIN PGP SIGNATURE-----
#
# iQEzBAABCAAdFiEEccLMIrHEYCkn0vOqp6FrSiUnQ2oFAmr3HqAACgkQp6FrSiUn
# Q2oOugf/cw/KQ3ZCv2SIs313JHhWR8fRO0k4FG/t9r9JA0vBMgDPrKv6vfJWhFtg
# in5Nvy6KOkb/nq18MwuDzwmTgAyPYd1XACxHB8iR7g/MRbs9ODytQB12DUJVADEl
# Ww0Ht/VV0oXDPdpEEreQt5LvcErVVwfohzQXTCIVgMlhLjWvKg1hi0abTRzujZnm
# iyMdaN/hNz68yJbssOEnlXTVZ2jcRjkencRfBQMCQ7KI7/6Tod4MfSjPwqXLIeDc
# sES8yiAnn4N44q18iF7o1nKt9+rBXMZYRVs7Retxr/qsPuriEfhNBsiqx8XSeUnA
# Plmm9bOKu5rl9tDnjxAqrNd9mYjrwg==
# =Qmp0
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri 13 Nov 2026 07:28:48 AM MST
# gpg:                using RSA key 71C2CC22B1C4602927D2F3AAA7A16B4A2527436A
# gpg: Good signature from "Eric Blake <eblake@redhat.com>" [unknown]
# gpg:                 aka "Eric Blake (Free Software Programmer) <ebb9@byu.net>" [unknown]
# gpg:                 aka "[jpeg image of size 6874]" [unknown]
# gpg: WARNING: This key is not certified with a trusted signature!
# gpg:          There is no indication that the signature belongs to the owner.
# Primary key fingerprint: 71C2 CC22 B1C4 6029 27D2  F3AA A7A1 6B4A 2527 436A

* tag 'pull-nbd-2026-11-10-v2' of https://gitlab.com/ebblake/qemu:
  iotests: Add another nbd-robustness test
  nbd/server: Reject rather than assert on non-compliant NBD_OPT_SET_META_CONTEXT
  iotests: Add new nbd-robustness test
  nbd/server: Reject rather than assert on non-compliant BLOCK_STATUS
  iotests: Refactor python NBD server setup
  docs: Mention security considerations for NBD

Signed-off-by: Richard Henderson <richard.henderson@linaro.org>