Bump library versions to resolve several vulns

[KrisKennawayDD]

Resolves several vulns by updating to newer library versions. Also updates the go requirement to 1.23.0 which is required by at least one of these libs.

┌─────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│       Library       │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                           │
├─────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ golang.org/x/crypto │ CVE-2024-45337 │ CRITICAL │ fixed  │ v0.22.0           │ 0.31.0        │ golang.org/x/crypto/ssh: Misuse of                        │
│                     │                │          │        │                   │               │ ServerConfig.PublicKeyCallback may cause authorization    │
│                     │                │          │        │                   │               │ bypass in golang.org/x/crypto                             │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2024-45337                │
│                     ├────────────────┼──────────┤        │                   ├───────────────┼───────────────────────────────────────────────────────────┤
│                     │ CVE-2025-22869 │ HIGH     │        │                   │ 0.35.0        │ golang.org/x/crypto/ssh: Denial of Service in the Key     │
│                     │                │          │        │                   │               │ Exchange of golang.org/x/crypto/ssh                       │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2025-22869                │
├─────────────────────┼────────────────┼──────────┤        ├───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ golang.org/x/net    │ CVE-2025-22870 │ MEDIUM   │        │ v0.24.0           │ 0.36.0        │ golang.org/x/net/proxy: golang.org/x/net/http/httpproxy:  │
│                     │                │          │        │                   │               │ HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2025-22870                │
│                     ├────────────────┤          │        │                   ├───────────────┼───────────────────────────────────────────────────────────┤
│                     │ CVE-2025-22872 │          │        │                   │ 0.38.0        │ golang.org/x/net/html: Incorrect Neutralization of Input  │
│                     │                │          │        │                   │               │ During Web Page Generation in x/net in...                 │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2025-22872                │
├─────────────────────┼────────────────┼──────────┤        ├───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ golang.org/x/oauth2 │ CVE-2025-22868 │ HIGH     │        │ v0.18.0           │ 0.27.0        │ golang.org/x/oauth2/jws: Unexpected memory consumption    │
│                     │                │          │        │                   │               │ during token parsing in golang.org/x/oauth2/jws           │
│                     │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2025-22868                │
└─────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

(Tests in github.com/bojand/ghz/runner are failing but they are also failing the same way on master)

[KrisKennawayDD]

@bojand When you have the chance could you please take a look at this dependency update PR?

[bojand]

Hello, thanks for the PR. I'll try and merge and release this soon, later this week or over the weekend.