chore(deps): bump golang.org/x/crypto to v0.52.0

[kparkinson-ld]

Summary

Remediates the open CRITICAL Dependabot alert for golang.org/x/crypto by bumping it from v0.45.0 → v0.52.0 (the minimum patched version).

golang.org/x/crypto v0.52.0 requires Go >= 1.25, so the module go directive is bumped 1.24.0 → 1.25.0. CI resolves its Go version from go-version-file: go.mod, and the Dockerfile uses golang:alpine (unpinned), so no other version pins needed changing.

Transitive deps pulled up by go mod tidy: golang.org/x/sys v0.38.0 → v0.45.0, golang.org/x/text v0.31.0 → v0.37.0. The vendor/ tree was regenerated via go mod vendor (accounts for the large diff).

Verified with go build ./..., go vet ./..., and GONFALON_MODE=test go test ./... (all pass), plus the repo's golangci-lint pre-commit hook.

Link to Devin session: https://app.devin.ai/sessions/06c2bdbde5ff4cc1b83896749c2db1d6
Requested by: @kparkinson-ld

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[pkaeding]

fixed in another pr