[TSE-3094] fix security patches

[jnyi]

The vendor changes are necessary in this project because it uses Go vendoring. When you update dependencies in
go.mod, the vendor/ directory must be updated to match, otherwise you get the "inconsistent vendoring" error we
encountered.

You have two options:

1. Keep vendoring (current approach): Run go mod vendor after dependency updates
2. Remove vendoring: Delete the vendor/ directory and rely on the module cache