fix: vulns

[Jdunsby]

Description

NOTE: Most of the changes in this PR (everything in licences/github.com) are from regenerating licenses after applying upgrades.

Resolves high-severity SCA vulnerabilities that were failing the CI security gate (snyk test --severity-threshold=high).

Dependency updates in go.mod / go.sum:

• Go toolchain 1.25.7 → 1.25.11 — minimum patched 1.25 release for stdlib CVEs (net, crypto, mime, etc.)
• github.com/go-git/go-git/v5 5.14.0 → 5.19.1 — direct upgrade fixing transport and object parsing CVEs
• Transitive upgrades — golang.org/x/crypto 0.52.0, github.com/go-viper/mapstructure/v2 2.4.0, and related go-git dependencies

Validated with snyk test --severity-threshold=high, make lint, and go test ./....

Checklist

• Tests added and all succeed
• Regenerated mocks, etc. (make generate)
• Linted (make lint-fix)
• README.md updated, if user-facing
• License file updated, if new 3rd-party dependency is introduced

[CLAassistant]

All committers have signed the CLA.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[ifeanyiecheruo]

Changes look good