Backport patch-safe CVE fixes for v0.23.5

[thomasmaas]

Cherry-pick of CVE security fix for the v0.23.5 patch release.

Changes

• Upgrade Go toolchain directive from 1.26.4 to 1.26.7 (fixes Go stdlib CVEs: net/url, crypto/tls, html/template, net/http, encoding/asn1)

Note: authorino-operator does not use OTel directly so no OTel upgrade needed.
The authorino operand version will be updated to v0.24.4 via the release workflow.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 87b2356f-cd6c-4b65-93e9-2bc4af9af49f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.20%. Comparing base (d0d42bd) to head (f3c4aa9).
⚠️ Report is 2 commits behind head on release-0.23.

Additional details and impacted files

@@              Coverage Diff              @@
##           release-0.23     #356   +/-   ##
=============================================
  Coverage         57.20%   57.20%           
=============================================
  Files                13       13           
  Lines              1458     1458           
=============================================
  Hits                834      834           
  Misses              529      529           
  Partials             95       95           

Flag	Coverage Δ
unit	57.20% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.