cos-extensions: upgrade golang.org/x/crypto to v0.52.0 to fix CVE-2026-39832

Upgrade golang.org/x/crypto dependency to v0.52.0 and re-vendor Go dependencies via `go mod vendor` to resolve CVE-2026-39832 in app-admin/extensions-manager.

Provenance:
- CVE-2026-39832: Go module golang.org/x/crypto fixed in v0.52.0, fix commit go.dev/cl/778640 (https://github.com/advisories/GHSA-f5wc-c3c7-36mc)

Build adjustments:
- go get golang.org/x/crypto@v0.52.0
- go mod tidy && go mod vendor && go mod verify

BUG=b/575810037
TEST=go mod verify; go test -mod=vendor ./...; CGO_ENABLED=0 go build -mod=vendor ./...
RELEASE_NOTE=Fixed CVE-2026-39832 in cos-extensions.

cos-patch: security-high
Change-Id: I1b1c557fa47af979fa74d63cd415153f2a8b1646
Reviewed-on: https://cos-review.googlesource.com/c/cos/cos-extensions/+/228107
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>
Reviewed-by: Chenglong Tang <chenglongtang@google.com>