Update Go to 1.25.5

[applejag]

Update Go and github.com/quic-go/quic-go to resolve some vulnerabilities:

$ govulncheck ./...
Vulnerability #1: GO-2025-4233
    HTTP/3 QPACK Header Expansion DoS in github.com/quic-go/quic-go
  More info: https://pkg.go.dev/vuln/GO-2025-4233
  Module: github.com/quic-go/quic-go
    Found in: github.com/quic-go/quic-go@v0.54.1
    Fixed in: github.com/quic-go/quic-go@v0.57.0
    Example traces found:
       #1: pkg/jira/jira.go:192:31: jira.client.StatusMustExist calls io.ReadAll, which eventually calls http3.ConfigureTLSConfig
       #2: cmd/root.go:81:24: cmd.Execute calls cobra.Command.Execute, which eventually calls http3.Error.Error

Vulnerability #2: GO-2025-4175
    Improper application of excluded DNS name constraints when verifying
    wildcard names in crypto/x509
  More info: https://pkg.go.dev/vuln/GO-2025-4175
  Standard library
    Found in: crypto/x509@go1.25.4
    Fixed in: crypto/x509@go1.25.5
    Example traces found:
       #1: pkg/jira/jira.go:192:31: jira.client.StatusMustExist calls io.ReadAll, which eventually calls x509.Certificate.Verify

Vulnerability #3: GO-2025-4155
    Excessive resource consumption when printing error string for host
    certificate validation in crypto/x509
  More info: https://pkg.go.dev/vuln/GO-2025-4155
  Standard library
    Found in: crypto/x509@go1.25.4
    Fixed in: crypto/x509@go1.25.5
    Example traces found:
       #1: pkg/jira/jira.go:192:31: jira.client.StatusMustExist calls io.ReadAll, which eventually calls x509.Certificate.Verify
       #2: pkg/jira/jira.go:192:31: jira.client.StatusMustExist calls io.ReadAll, which eventually calls x509.Certificate.VerifyHostname

[applejag]

Oh I didn't see #157

I'm blind