deps: bump golang.org/x/net to address CVE

[josephwoodward]

golang/go#79571

[claude]

Commits
LGTM

Review
Pure dependency bump in go.mod and go.sum: golang.org/x/net 0.53.0 → 0.55.0 (CVE fix per golang/go#79571), with associated transitive updates to golang.org/x/crypto (0.50.0 → 0.51.0), golang.org/x/text (0.36.0 → 0.37.0), and golang.org/x/term (0.42.0 → 0.43.0). No source code changes.

LGTM

[claude]

Commits
LGTM

Review
Patch-level dependency bumps (golang.org/x/{crypto,net,term,text}) addressing a CVE. The three test files using golang.org/x/net/http2/h2c get //nolint:staticcheck annotations to suppress deprecation warnings introduced by the new x/net version; all three h2c call sites in the repo are covered.

LGTM