Modernize Vanity Service

[bbengfort]

Scope of changes

Modernizes Vanity

Fixes SC-37591

Type of change

• new feature
• bug fix
• documentation
• testing
• technical debt
• other (describe)

Acceptance criteria

This PR will be merged without review.

Definition of Done

• I have manually tested the change running it locally (having rebuilt all containers) or via unit tests
• I have added unit and/or integration tests that cover my changes
• I have added new test fixtures as needed to support added tests
• I have updated the dependencies list if necessary (including updating yarn.lock and/or go.sum)

---

Note

Medium Risk
Medium risk because it updates CI/CD actions and bumps the Go toolchain/base images, which can change build outputs and introduce compatibility issues in release and container pipelines.

Overview
Modernizes the build and release pipeline by upgrading GitHub Actions (checkout/setup-go/cache and Docker build/login/setup actions) and moving CI/testing to Go 1.25.x/1.26.x with a newer staticcheck.

Updates the Dockerfile to build with new Go 1.25 Debian 13 base images, injects a BUILD_DATE build arg/ldflag, and removes the final-stage apt-get install step for ca-certificates. Dependency versions in go.mod/go.sum are bumped accordingly.

^{Written by Cursor Bugbot for commit 789ffd0. Configure here.}