AIT-72940 update vulnerable golang.org/x dependencies

[wgkingk]

Summary

• upgrade golang.org/x/net to v0.56.0
• upgrade golang.org/x/text to v0.39.0
• accept the required transitive updates: golang.org/x/crypto v0.53.0, x/sys v0.46.0, and x/term v0.44.0
• document GO-2026-5932 as not reachable: registry-auth imports x/crypto/bcrypt only, while the advisory affects x/crypto/openpgp packages

Jira

https://jira.alauda.cn/browse/AIT-72940

Validation

• resolved module versions and checksums verified with go list/go mod download
• git diff --check
• pull request CI performs the project Docker build and tests for linux/amd64 and linux/arm64