fix(ci): bump Go to 1.26 and gosec to v2.25.0 to match go.mod

go.mod requires go 1.26.1, so CI needs Go 1.26+. This also lets us
use the latest gosec.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: haasonsaas

.github/workflows/security.yml

@@ -15,10 +15,10 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: '1.24'
+          go-version: '1.26'
 
       - name: Install gosec
-        run: go install github.com/securego/gosec/v2/cmd/gosec@v2.22.11
+        run: go install github.com/securego/gosec/v2/cmd/gosec@v2.25.0
 
       - name: Install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest