[codex] Update Go toolchain dependencies

[steipete]

Summary

• update golang.org/x/term to v0.44.0 and golang.org/x/sys to v0.46.0
• raise the module and Docker build Go baseline from 1.24 to 1.25, as selected by the Go module solver
• update checkout usage to actions/checkout@v7 across CI, Docker, and release workflows

Validation

• go mod tidy idempotence check
• go test ./...
• golangci-lint run
• govulncheck ./...

Notes

• Docker is unavailable in this local shell, so the Docker image smoke test was not run locally; the existing docker workflow covers it on GitHub Actions.
• No open PRs or issues were present before this change.

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: [codex] Update Go toolchain dependencies This is item 1/1 in the current shard. Shard 0/1.

This placeholder means the worker is alive and reading the current context. I will edit this same comment with the actual review when the claws are done clicking.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.