CVE-2025-22869 golang.org/x/crypto bump version

[irlndts]

Hi, there is a vulnerability CVE-2025-22869

I know pgx actually doesn't use the vulnerable functionality in golang.org/x/crypto but scanner alert still works.

I've done followings:

• Update go.mod to bump crypto version to v0.35.0
• Update go version to 1.24 since crypto v0.35.0 requires it
• Then go mod tidy
• Then go test ./... (everything is fine)

[jackc]

Are you sure about the Go 1.24 requirement? It looks like 1.23 is sufficient to me. https://cs.opensource.google/go/x/crypto/+/master:go.mod

I'd like to avoid that change as that would break pgx's Go compatible versions policy.