chore(go): bump toolchain to 1.25.10 — fixes reachable stdlib CVEs

govulncheck on PR #16 flagged Go-stdlib vulnerabilities reachable
from production code paths. All fixed in Go 1.25.9–1.25.10.

Also merges any in-flight master commits onto the scanner-install
branch.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: mastermanas805

go.mod

@@ -2,6 +2,8 @@ module instant.dev/common
 
 go 1.25.0
 
+toolchain go1.25.10
+
 require (
 	github.com/golang-jwt/jwt/v4 v4.5.0
 	github.com/google/uuid v1.6.0