Fix for CVEs 2026-{42507,27145 and 42504}

[n4zukker]

Updating for go 1.26 and otel cli libraries.

The intent of this PR is to apply fixes for

• CVE-2026-42507
• CVE-2026-27145
• CVE-2026-42504

[n4zukker]

Sorry for the messy history. I'm not good with forks.

[n4zukker]

Other CVEs fixed:

Severity	CVE	Component	Fixed version(s)
Critical	CVE-2026-39821	go://golang.org/x/net:0.48.0	[0.55.0]
High	CVE-2026-33814	go://golang.org/x/net:0.48.0	[0.53.0]
Medium	CVE-2026-25680	go://golang.org/x/net:0.48.0	[0.55.0]
Medium	CVE-2026-25681	go://golang.org/x/net:0.48.0	[0.55.0]
Medium	CVE-2026-27136	go://golang.org/x/net:0.48.0	[0.55.0]
Medium	CVE-2026-42502	go://golang.org/x/net:0.48.0	[0.55.0]
Medium	CVE-2026-42506	go://golang.org/x/net:0.48.0	[0.55.0]
Low	CVE-2026-39824	go://golang.org/x/sys:0.42.0	[0.44.0]

[tobert]

Oh hey, apologies for missing this. Taking a look now.