chore(ci): consolidate dependabot PR fixes into single branch

[digitallysavvy]

Consolidates the remaining failing Dependabot updates into a single PR to reduce review and merge overhead.

Changes

• Bump Go toolchain version in go.mod from 1.26.4 → 1.26.5.
• Update dependencies from the go_modules/golang.org/x/term-0.45.0 PR:
  • golang.org/x/term 0.43.0 → 0.45.0
  • golang.org/x/sys (indirect) 0.44.0 → 0.47.0
• Update GitHub Actions versions in workflows:
  • golangci/golangci-lint-action @v6 → @v9 with install-mode: binary
  • actions/upload-pages-artifact @v3 → @v5
  • goreleaser/goreleaser-action @v6 → @v7

Why

These combine the required dependency/action updates while fixing the CI failures seen in the previously failing Dependabot branches:

• #54 (x/term bump): govulncheck failures on Go 1.26.4 stdlib vulnerabilities.
• #36 (goreleaser-action): govulncheck failures on Go 1.26.4 stdlib vulnerabilities.
• #34 (golangci-lint-action v9): govulncheck failures plus goinstall/module path regression (/v2 package path mismatch).
• #35 (upload-pages-artifact v5): workflow/test compatibility issue with older CI state; updated branch basis + action bump
  includes the safe, current workflow posture.

Testing

• Manual review of the consolidated diff across:
  • go.mod, go.sum
  • .github/workflows/ci.yml
  • .github/workflows/pages.yml
  • .github/workflows/release.yml
• Recommend running CI checks on this branch and verifying the previously failing Dependabot scenarios are unblocked.

Notes

This intentionally replaces multiple small Dependabot bumps with one consolidated change set so maintainers can review/merge once.