build(deps): bump x-repositories and go to latest

[dduzgun-security]

Go and dependency bumps:

• go from 1.25.1 to 1.25.6 to 1.25.7
• golang.org/x/crypto from v0.36.0 to v0.47.0
• golang.org/x/net from v0.38.0 to v0.49.0
• golang.org/x/sys from v0.31.0 to v0.40.0
• golang.org/x/text from v0.23.0 to v0.33.0
• golang.org/x/time from v0.9.0 to v0.14.0

Resolves:

• https://github.com/hashicorp/vault-lambda-extension/security/dependabot/45
• https://github.com/hashicorp/vault-lambda-extension/security/dependabot/46
• https://github.com/hashicorp/vault-lambda-extension/security/dependabot/47
• https://github.com/hashicorp/vault-lambda-extension/security/dependabot/48
• CVE-2025-47907 and CVE-2025-47906 vulnerabilities #180
• VAULT-39893

PCI review checklist

• I have documented a clear reason for, and description of, the change I am making.

• If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

• If applicable, I've documented the impact of any changes to security controls.

  Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

[Axeirt]

Hello HashiCorp team!

Thanks a lot for your work on this repo.

I wanted to ask whether there’s any timeline for merging this PR.
It would help us a lot downstream, as it resolves a few security vulnerabilities that have been open for a while and are affecting our dependent repositories.

Thanks again, and appreciate you taking a look!