chore(deps): refresh SDK toolchains and container trust stores #4800

User Story

As an OpenShell maintainer completing #4794, I need the Go SDK, development tools, and container images to receive the published CA distrust updates alongside the Rust dependency fix.

Description

Update the Go SDK toolchain requirement, uv and Node.js pins, and container trust stores. Use upstream packages and official images, including the standard Ubuntu base for Gator, and keep the existing SDK and sandbox workflows working.

Context

Follow-up to #4794. The upstream versions and trust-store updates are listed in the public incident advisory.

Definition of Done

• The Go SDK and development/CI tools use versions containing the published fixes.
• Gateway, supervisor, Gator, and test images use updated trust stores and runtimes.
• Relevant SDK, container, and sandbox checks pass, including certificate-rejection checks.
• Document the Go version requirement and rebuilding affected applications and images.