chore: update from go-tools template

[hugoh]

Bumps the pinned go-tools workflow SHA and switches
template-update.yml's push token to TEMPLATE_UPDATE_TOKEN (a PAT
with Workflows write access) — the automatic GITHUB_TOKEN can never
push changes to .github/workflows/*.yml, which was causing every
dispatched template-update run to fail.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.78%. Comparing base (d1895e1) to head (c5db1a8).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #46   +/-   ##
=======================================
  Coverage   88.78%   88.78%           
=======================================
  Files          34       34           
  Lines        3638     3638           
=======================================
  Hits         3230     3230           
  Misses        311      311           
  Partials       97       97           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[deepsource-io]

DeepSource Code Review

We reviewed changes in d1895e1...c5db1a8 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
Go		Jul 2, 2026 2:33a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.