Merge changes from minio

Fixes Go problems and:

```
Vulnerability #1: GO-2026-4918
    Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in
    net/http/internal/http2 in golang.org/x/net
  More info: https://pkg.go.dev/vuln/GO-2026-4918
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.52.0
    Fixed in: golang.org/x/net@v0.53.0
    Example traces found:
      #1: pkg/iceberg/catalog.go:365:24: iceberg.DeleteWarehouse calls http.Client.Do, which eventually calls http2.Transport.NewClientConn
      #2: pkg/iceberg/catalog.go:365:24: iceberg.DeleteWarehouse calls http.Client.Do, which eventually calls http2.Transport.RoundTrip
      #3: pkg/iceberg/catalog.go:365:24: iceberg.DeleteWarehouse calls http.Client.Do, which eventually calls http2.noDialH2RoundTripper.NewClientConn
      #4: pkg/iceberg/catalog.go:365:24: iceberg.DeleteWarehouse calls http.Client.Do, which eventually calls http2.noDialH2RoundTripper.RoundTrip
      #5: pkg/iceberg/catalog.go:365:24: iceberg.DeleteWarehouse calls http.Client.Do, which eventually calls http2.unencryptedTransport.RoundTrip
```

* Bump CIlint and x/net

* lint