bump-go-toolchain
dev
Clears 9 reachable stdlib govulncheck findings (all fixed in go1.27.2). Remaining: GO-2026-5932 (x/crypto/openpgp, module-level only, no fix available; our code does not call it).