[4.1.2] Bump golang.org/x modules and align Go version to 1.26.8

[bbrks]

Latest golang.org/x/* releases:

golang.org/x/crypto v0.53.0 => v0.56.0
golang.org/x/net    v0.56.0 => v0.58.0
golang.org/x/sys    v0.46.0 => v0.47.0
golang.org/x/text   v0.40.0 => v0.41.0
golang.org/x/time   v0.14.0 => v0.15.0

x/oauth2 and x/sync were already current. x/exp left alone, it's pseudo-versioned with no tagged releases.

x/crypto v0.56.0 declares go1.26.0, which go 1.26.6 covers - but bumped Go 1.26.6 -> 1.26.8 in go.mod, ci.yml and service.yml anyway to match what manifest/product-config.json builds 4.1.2 with. Jenkins reads the version out of go.mod, so no Jenkinsfile change needed.

go build, go vet, yamllint and the unit suite all pass locally with cb_sg_enterprise,cb_sg_devmode.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

The changes are straightforward dependency and version-pin updates, consistently applied across go.mod, go.sum, and CI workflows.

Pull request overview

This PR updates Sync Gateway’s Go toolchain/version pins and bumps the golang.org/x/* dependency set to newer releases, keeping CI and module metadata aligned for the 4.1.2 branch.

Changes:

• Bumped golang.org/x/crypto, x/net, x/sys, x/text, and x/time versions in go.mod (with corresponding go.sum updates).
• Updated the Go version in go.mod from 1.26.6 to 1.26.8.
• Aligned GitHub Actions workflows to use Go 1.26.8.

File summaries

File	Description
go.mod	Updates Go version and bumps golang.org/x/* module requirements.
go.sum	Refreshes module checksums to match the updated go.mod requirements.
.github/workflows/ci.yml	Updates the CI Go version anchor to 1.26.8.
.github/workflows/service.yml	Updates service workflow to build/test using Go 1.26.8.

Review details

• Files reviewed: 3/4 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.