GHSA-c66c-vq6w-fvh5: Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

A vulnerability in Omni's CreateSchematic API allows an authenticated Operator (administrator) to perform path traversal (accessing files or endpoints outside the intended directory) on the image-factory server by embedding unsanitized user input into a URL path. An attacker can use sequences like '../' to navigate to unintended endpoints and receive back error messages that may leak sensitive information from the image-factory server.