security: fix CVE-2025-47914

[thatnealpatel]

This is a PRIVATE issue for CVE-2025-47914.
It is tracked in http://b/438459636.

/cc @golang/security and @golang/release

[gopherbot]

Change https://go.dev/cl/721960 mentions this issue: ssh/agent: prevent panic on malformed constraint