docs(csm-vm): add code-to-cloud Dockerfile source linking section

[cyrbouchiat]

Summary

• Adds a new "Trace production vulnerabilities to source code" section to the Cloud Security Vulnerabilities overview page
• Explains how Datadog links CVEs detected on running container images back to the Dockerfile and commit that introduced the vulnerable package (code-to-cloud mapping)
• Cross-references the existing Link Dockerfile to vulnerabilities section in the CI/CD setup guide
• Adds two screenshots (light/dark) showing the Dockerfile preview panel in the vulnerability detail view

Context

This section is part of DASH preparation, making the code-to-cloud remediation workflow more discoverable from the main vulnerabilities page.

Test plan

• Verify the new section renders correctly between "Continuously detect..." and "Automation and Jira integration"
• Verify the [Link Dockerfile to vulnerabilities] link resolves to the correct CI/CD anchor
• Verify the screenshot displays correctly in both light and dark mode
• Verify the new further_reading entry appears in the "Further reading" section at the bottom

Made with Cursor

[github-actions]

Preview links (active after the build_preview check completes)

Modified Files

• https://docs-staging.datadoghq.com/cyril/csm-vm-dockerfile-source-linking/security/cloud_security_management/vulnerabilities/