[Aikido] Fix 3 security issues in google.golang.org/grpc, x/text, x/net

[aikido-autofix]

Upgrade grpc-go, x/text, and x/net to fix authorization bypass, HTTP/2 DoS, panic vulnerabilities, and UTF-8/DNS parsing issues.

✅ 3 CVEs resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
GHSA-hrxh-6v49-42gf	HIGH	[google.golang.org/grpc] Three vulnerabilities affect xDS RBAC authorization and HTTP/2 transport: authorization bypass when unsupported Metadata/RequestedServerName matchers are silently ignored, denial of service via HTTP/2 Rapid Reset mitigation bypass causing high CPU, and server panic when NOT rules wrap unsupported fields in RBAC policies.
CVE-2026-56852	HIGH	[golang.org/x/text] A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
CVE-2026-46600	HIGH	[golang.org/x/net] Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

[deepsource-io]

DeepSource Code Review

We reviewed changes in f6e3d21...abbfc82 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Go		Jul 27, 2026 1:46a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.