Update vulnerable dependencies on master

[asddongmen]

Background

TiCDC master already contains the fixed AWS eventstream and S3 versions, but
still selects older go-jose, x/crypto, x/net, x/text, and gRPC dependencies
affected by the reported security advisories.

Scope

• Keep eventstream v1.7.8 and S3 v1.97.3.
• Update go-jose to v4.1.4.
• Update x/crypto to v0.53.0, x/net to v0.56.0, and x/text to v0.39.0.
• Update gRPC to v1.82.1.
• Keep the change limited to module metadata and Go's required transitive
  closure.

GO-2026-5932 has no known fixed version for x/crypto/openpgp, but the
affected package is not present in TiCDC's complete master package graph.

Done criteria

• go mod tidy is clean.
• TiCDC builds successfully.
• Full unit tests and repository presubmit checks pass.
• Master CI is green.