states/docker_container: pass temp_container_name, not the dict, to _replace

[SAY-5]

What does this PR do?

Fixes a wrong-argument bug in salt/states/docker_container.py's running() state.

running() creates a temp container from docker.create and captures two related values:

• temp_container — the full dict returned by docker.create
• temp_container_name — temp_container["Name"], a string

The detected-config-diff path correctly passes the string to the local _replace(orig, new) helper:

if not _replace(name, temp_container_name):

The skip_comparison / force=True path (also reached from mod_watch) passed the dict instead:

if not _replace(name, temp_container):  # <-- wrong argument

_replace immediately calls docker.rm(name, stop=True) on the original container and then docker.rename(new, orig). docker.rename's first argument is forwarded to inspect_container, which expects a string name/ID. Handing it a dict raises a CommandExecutionError — and by then the original container has already been removed. The state returns result: False, but the minion is left with the original container destroyed and the temp container stranded under its generated temp name.

This PR passes temp_container_name on the second call site too, matching the first path.

What issues does this PR fix or reference?

Fixes #68959

Previous Behavior

docker_container.running with force=True (or triggered via mod_watch) on an existing container whose spec matches the desired spec would:

1. Remove the original container via docker.rm.
2. Fail to rename the temp container (docker.rename raises on the dict argument).
3. Return result: False with the original container destroyed and the temp container present but renamed to something like Salt_Temp_XXXX.

New Behavior

_replace(name, temp_container_name) is called with the string container name on both paths. The force-replace path now correctly swaps the temp container into place, matching the non-force path's behaviour.

Merge requirements satisfied?

• Changelog: changelog/68959.fixed.md
• Tests — this is a pure wrong-argument fix that mirrors the existing _replace(name, temp_container_name) call site at line ~1890. Happy to add a targeted regression test against docker.rename if maintainers prefer.

Commits signed with GPG?

Commits are DCO-signed off (Signed-off-by: SAY-5 <SAY-5@users.noreply.github.com>) per the repository's contribution flow.