cos-extensions: upgrade golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830

Upgrade golang.org/x/crypto dependency to v0.52.0 and re-vendor Go dependencies via `go mod vendor` to resolve CVE-2026-39830 in app-admin/extensions-manager.

Provenance:
- CVE-2026-39830: Go module golang.org/x/crypto fixed in v0.52.0, fix commit go.dev/cl/781640 (https://github.com/advisories/GHSA-vgwf-h737-ff37)

Build adjustments:
- go get golang.org/x/crypto@v0.52.0
- go mod tidy && go mod vendor && go mod verify

BUG=b/575144209
TEST=go mod verify; go test -mod=vendor ./...; CGO_ENABLED=0 go build -mod=vendor ./...
RELEASE_NOTE=Fixed CVE-2026-39830 in cos-extensions.

cos-patch: security-high
Change-Id: I20eaf2fd50e99786f7ba4a53c5d9698d86f8f3c9
Reviewed-on: https://cos-review.googlesource.com/c/cos/cos-extensions/+/227446
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Chenglong Tang <chenglongtang@google.com>
SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>