deps(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0

[dependabot]

Bumps golang.org/x/crypto from 0.57.0 to 0.58.0.

Commits

• 8fdf07b go.mod: update golang.org/x dependencies
• 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
• c3db4df acme: prefer test log helpers in test contexts
• 4e01a84 acme: adds support for profiles draft
• 8f0f111 ssh: check that no Unicode-aware string function is used
• b39ff6d ssh: add certificate algorithms for ML-DSA keys
• 4465db3 ssh: add the ML-DSA public key algorithms
• 83e695b ssh: implement ETM mode for CBC ciphers
• 946083a ssh: only drop a trailing carriage return
• 543dde9 ssh: accept known_hosts entries with a multi-word comment
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[devnullvoid]

Reviewed the dependency-only diff. This update also includes x/term v0.47.0 and x/tools v0.51.0, covering #167 and #169, plus the associated x/net, x/sync, x/sys, and x/text updates.

Validated exact head 355964a in an isolated worktree: make build, make test, and make code-quality all passed (including go vet, golangci-lint with zero issues, and QueueUpdateDraw checks). The built binary also runs successfully.

The existing CI/Nix validation gaps are tracked separately in #172. The green Nix hash check is not evidence of a successful Nix build: its logs show the pre-existing Go 1.25 versus required Go 1.26 toolchain mismatch.