[AUTO-CHERRYPICK] Upgrade clamav to 1.0.9 to address CVE-2025-20260 [CRITICAL] - branch 3.0-dev (#14112)

Co-authored-by: kgodara912 <kshigodara@outlook.com>
Co-authored-by: Kshitiz Godara <kgodara@microsoft.com>
Co-authored-by: jslobodzian <joslobo@microsoft.com>

Author: 4 people