fix(deps): bump golang.org/x/crypto to v0.54.0 (Dependabot)

Patches all open GHSA alerts on x/crypto (SSH-related; we only import
chacha20poly1305). Requires Go 1.25 — update native-agent CI toolchain.

.github/workflows/ci.yml

@@ -68,7 +68,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.25"
       - name: Test + build sc5beacon matrix
         working-directory: agents/sc5beacon
         run: |

agents/sc5beacon/go.mod

@@ -1,10 +1,10 @@
 module github.com/SquidSec/SquidC5/agents/sc5beacon
 
-go 1.22
-
-require golang.org/x/crypto v0.31.0
+go 1.25.0
 
 require (
 	github.com/gorilla/websocket v1.5.3
-	golang.org/x/sys v0.28.0 // indirect
+	golang.org/x/crypto v0.54.0
 )
+
+require golang.org/x/sys v0.47.0 // indirect

agents/sc5beacon/go.sum

@@ -1,6 +1,6 @@
 github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
 github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U=
-golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk=
-golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA=
-golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw=
+golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk=
+golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
+golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=