Raise go version to 1.25.3

[marcell-vida]

Checklist

• I've read and followed the Contribution Guidelines
• README.md is updated with the changes (if needed)

Version

Requires a MINOR version update

Context

Update to the latest stable Go version and modernize tooling to address potential security issues and maintain compatibility with current Go toolchain changes.

Changes

• Raise Go version to 1.25.3 (from 1.23.10)
• Update golangci-lint from v2.3.1 to v2.6.0
• Update version output parsing tests to handle new commit stamp formats
• Add cliVersion() helper function to properly format version in tests
• Remove vendored github.com/bitrise-io/go-utils/v2/command code

Investigation details

• Go version stamp format has changed as documented in cmd/go: stamp the pseudo-version in builds generated by go build golang/go#50603
• Tests now verify commit field matches expected formats: (devel), commit hash, or commit hash with +dirty suffix
• The cliVersion() helper accounts for alternative installations by including commit hash in version string

Decisions

[bitrise]

Summary

Upgrade Go version to 1.25.3 and modernize tooling. Updates golangci-lint to v2.6.0, bumps minimum versions for envman and stepman, fixes format string handling in envfile logging, and updates all dependencies with corresponding checksums.

Walkthrough

File	Summary
.tool-versions, bitrise.yml, go.mod, go.sum	Updated Go version from 1.23.10 to 1.25.3, golangci-lint to v2.6.0, and updated all dependencies with checksums
bitrise/setup.go	Bumped minimum versions: envman to 2.5.5 and stepman to 0.18.3
envfile/envfile.go	Fixed format string handling in LogEnvVarLimitIfExceeded() for security and updated output formatting
integrationtests/cli/version_test.go, models/workflow_run_plan_test.go	Updated tests to handle new Go version stamp formats
vendor/	Updated vendored dependencies including envman, go-utils, go-retryablehttp, and golang.org packages