chore: bump go directive to 1.25.10 + tidy (clears stdlib vulns) (#47)

Updates the go directive from 1.21.3 (long-EOL) to 1.25.10 (latest 1.25.x
patch) and runs `go mod tidy`, which promotes cobra from an // indirect
marker to a direct requirement (it is imported by ./cmd/*.go).

govulncheck ./... reports 0 callable vulnerabilities after the bump.

Refs QUA-13.

Co-authored-by: LeadGoEngineer <leadgoengineer@quantcli.local>
Co-authored-by: Paperclip <noreply@paperclip.ing>

Author: 3 people

go.mod

@@ -1,9 +1,10 @@
 module github.com/quantcli/liftoff-export-cli
 
-go 1.21.3
+go 1.25.10
+
+require github.com/spf13/cobra v1.10.2
 
 require (
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/spf13/cobra v1.10.2 // indirect
 	github.com/spf13/pflag v1.0.9 // indirect
 )