fix(security): [Aikido] [SEC-725] Fix 2 security issues in google.golang.org/protobuf, x/sys

[aikido-autofix]

Upgrade protobuf and sys to fix infinite loop DoS in protojson.Unmarshal and string overflow handling vulnerability.

✅ 2 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
CVE-2024-24786	HIGH	[google.golang.org/protobuf] The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set.
CVE-2026-39824	LOW	[golang.org/x/sys] NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit number of bytes), it returns a truncated string rather than an error.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ChristianWitts]

Approving Aikido security autofix — CI is green. Owning team: please give this a final review and merge.

[kelu-diao]

Approving as part of the batch PR review requested in Slack — CI checks are green. Owning team: please do the final review and merge.

---

Generated by Claude Code