Description

We're a little bit behind on our Go releases, and probably are missing a few security patches as called out correctly in #10893. I'd like us to bump out toolchain to latest, and while we're at it, I think we should just bump the go module version since we are shipping a binary anyway, it's not a huge issue. It also gives access to some minor goodies like t.Chdir in tests.

Less important, I think there's also one or more dependabot PRs that might depend on go1.24 but I can't quite find them right now.

Expected Output

• The go directive is 1.24
• The go toolchain directive is 1.24.4

Follow On

I believe we should investigate whether dependabot can notify us of toolchain updates. I don't think there's any reason we shouldn't be bumping it each time.