go/runtime/host: correct clone3 version threshold

[pro-wh]

expressing the version octets in hexadecimal instead of octal

the effect of the bug was that the threshold was too low and older kernels were mistakenly asked to resolve 'clone3,' resulting in

{"caller":"sandbox.go:463","err":"failed to spawn sandbox: sandbox: error while generating seccomp policy: could not resolve name to syscall: "clone3"","level":"error","module":"runtime/host/sandbox","msg":"failed to start runtime","runtime_id":"000000000000000000000000000000000000000000000000e2eaa99fc008f87f","ts":"2022-07-27T06:22:04.5330855Z"}