CLSA-2026-1787230282 dovecot: Fix of CVE-2026-0394

CVE-2026-0394: auth: db-passwd-file: reject passwd-file paths that escape the configured prefix after variable expansion...