Bump Go builder to 1.25-alpine3.22, runtime base to alpine:3.22, and
upgrade golang.org/x/crypto to v0.52.0, golang.org/x/net to v0.55.0,
and Masterminds/goutils to v1.1.1. Resolves all 64 Trivy findings on
plugins/email:4.0.2 (2 Critical / 40 High / 20 Medium / 2 Low → 0/0/0/0)
without introducing any new CVEs.
OnDemand baseline scan: Success (Connector=harnesssecure)
OnDemand after-scan: Failed -- scheduler error (harnessdev/PROJECT) on
docker.io connector path; needs manual re-run to confirm Prisma Cloud
delta.