fix(ci): bump Go toolchain to 1.25.11 (clears GO-2026-5039/5037 stdlib vulns) (#23)

The govulncheck and osv-scan required checks fail on both master and
Dependabot PR #22 due to two Go stdlib vulnerabilities present in the
go1.25.10 toolchain that CI builds with:

  - GO-2026-5039 (net/textproto): arbitrary inputs included in errors
    without escaping. Fixed in go1.25.11.
  - GO-2026-5037 (crypto/x509): inefficient candidate hostname parsing.
    Fixed in go1.25.11.

These are stdlib vulns, not module deps, so they are unrelated to the
actions-group bump in #22. govulncheck.yml resolves its toolchain from
go.mod (go-version-file + check-latest), so bumping the toolchain
directive to go1.25.11 clears both checks and unblocks master and #22.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: mastermanas805

go.mod

@@ -2,7 +2,7 @@ module github.com/InstaNode-dev/cli
 
 go 1.25
 
-toolchain go1.25.10
+toolchain go1.25.11
 
 require (
 	github.com/spf13/cobra v1.10.2