bake: add wildcard to fs entitlements to allow any paths

[crazy-max]

follow-up #2796 (comment)

[crazy-max]

Removed long path name handling in our tests 619fa8a but it fails: https://github.com/docker/buildx/actions/runs/11972131393/job/33378391055#step:6:1330

 === Failed
=== FAIL: bake TestValidateEntitlements/ExportLocal (0.00s)
    entitlements_test.go:352: 
        	Error Trace:	D:/a/buildx/buildx/bake/entitlements_test.go:352
        	Error:      	Not equal: 
        	            	expected: bake.EntitlementConf{NetworkHost:false, SecurityInsecure:false, FSRead:[]string{"D:\\a\\buildx\\buildx\\bake"}, FSWrite:[]string{"C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\001", "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\002"}, ImagePush:[]string(nil), ImageLoad:[]string(nil), SSH:false}
        	            	actual  : bake.EntitlementConf{NetworkHost:false, SecurityInsecure:false, FSRead:[]string{"D:\\a\\buildx\\buildx\\bake"}, FSWrite:[]string{"C:\\Users\\runneradmin\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\001", "C:\\Users\\runneradmin\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\002"}, ImagePush:[]string(nil), ImageLoad:[]string(nil), SSH:false}
        	            	
        	            	Diff:
        	            	--- Expected
        	            	+++ Actual
        	            	@@ -7,4 +7,4 @@
        	            	  FSWrite: ([]string) (len=2) {
        	            	-  (string) (len=75) "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\001",
        	            	-  (string) (len=75) "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\002"
        	            	+  (string) (len=78) "C:\\Users\\runneradmin\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\001",
        	            	+  (string) (len=78) "C:\\Users\\runneradmin\\AppData\\Local\\Temp\\TestValidateEntitlements4101399922\\002"
        	            	  },
        	Test:       	TestValidateEntitlements/ExportLocal
    --- FAIL: TestValidateEntitlements/ExportLocal (0.00s)

=== FAIL: bake TestValidateEntitlements/SecretFromEscapeLink (0.00s)
    entitlements_test.go:352: 
        	Error Trace:	D:/a/buildx/buildx/bake/entitlements_test.go:352
        	Error:      	Not equal: 
        	            	expected: bake.EntitlementConf{NetworkHost:false, SecurityInsecure:false, FSRead:[]string{"C:\\Users\\RUNNER~1\\AppData\\Local\\Temp"}, FSWrite:[]string(nil), ImagePush:[]string(nil), ImageLoad:[]string(nil), SSH:false}
        	            	actual  : bake.EntitlementConf{NetworkHost:false, SecurityInsecure:false, FSRead:[]string{"C:\\Users\\runneradmin\\AppData\\Local\\Temp"}, FSWrite:[]string(nil), ImagePush:[]string(nil), ImageLoad:[]string(nil), SSH:false}
        	            	
        	            	Diff:
        	            	--- Expected
        	            	+++ Actual
        	            	@@ -4,3 +4,3 @@
        	            	  FSRead: ([]string) (len=1) {
        	            	-  (string) (len=36) "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp"
        	            	+  (string) (len=39) "C:\\Users\\runneradmin\\AppData\\Local\\Temp"
        	            	  },
        	Test:       	TestValidateEntitlements/SecretFromEscapeLink
    --- FAIL: TestValidateEntitlements/SecretFromEscapeLink (0.00s)

=== FAIL: bake TestValidateEntitlements (1.07s)

It makes sense as the expected paths don't match anymore like

buildx/bake/entitlements_test.go

Line 279 in 17eff25

"dest": dir1,

So as filepath.EvalSymlinks evaluates itself to a long path name in entitlements implementation we don't have the choice to handle it in our tests as well.

Here is a repro of the behavior: https://github.com/crazy-max/go-longpath-win/blob/435f1ae22f324f213b7c7b49be7165aa9eafbd3d/main.go

tmpDir := os.TempDir()
wd, _ := os.Getwd()
fmt.Printf("TempDir: %s\n", tmpDir)
fmt.Printf("WorkingDir: %s\n", wd)

tmpDirSym, _ := filepath.EvalSymlinks(tmpDir)
wdSym, _ := filepath.EvalSymlinks(wd)
fmt.Printf("TempDirEvalSymlinks: %s\n", tmpDirSym)
fmt.Printf("WorkingDirEvalSymlinks: %s\n", wdSym)

Output on GHA: https://github.com/crazy-max/go-longpath-win/actions/runs/11972415653/job/33379286983#step:4:7

TempDir: C:\Users\RUNNER~1\AppData\Local\Temp
WorkingDir: D:\a\go-longpath-win\go-longpath-win
TempDirEvalSymlinks: C:\Users\runneradmin\AppData\Local\Temp
WorkingDirEvalSymlinks: D:\a\go-longpath-win\go-longpath-win

[crazy-max]

Revert the change to allow any volumes for / on windows and handle that case in our tests instead.