(security) golang: bump Go version to 1.25.13-1

[bot-for-go]

Hi! 👋 I'm the Microsoft team's bot. This is an automated pull request I generated to bump the Go version to 1.25.13-1.

This update contains security fixes.

I'm not able to run the Azure Linux pipelines yet, so the Microsoft release runner will need to finalize this PR.

Finalization steps:

• Trigger Source Tarball Publishing with:
  Full Name:

  go1.25.13-20260813.2.src.tar.gz
  

  URL:

  https://github.com/microsoft/go/releases/download/v1.25.13-1/go1.25.13-20260813.2.src.tar.gz
  

• Trigger the Buddy Build with:
  First field:

  PR-18438
  

  Core spec:

  golang-1.25
  

• Post a PR comment with the URL of the triggered Buddy Build.
• Mark this draft PR as ready for review.

Thanks!

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[Davis Goodin (dagood)]

Buddy build queued: https://dev.azure.com/mariner-org/36d030d6-1d99-4ebd-878b-09af1f4f722f/_build/results?buildId=1182774

[Kanishk Bansal (Kanishk-Bansal)]

need to remove the CVE-2026-39821.patch as this is fixed in the version as per https://pkg.go.dev/vuln/GO-2026-5026

[Kanishk Bansal (Kanishk-Bansal)]

we need to merge #18437
so that the check of Source Signature Check (SPECS) can pass.

[Kanishk Bansal (Kanishk-Bansal)]

/azurepipelines run

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.

[Kanishk Bansal (Kanishk-Bansal)]

/azurepipelines run

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.