Chore: update dependencies in go.mod to latest versions

[roguepikachu]

Summary by cubic

Upgrade CUE to v0.14.1 and refresh go.mod/go.sum to current versions for security, compatibility, and tooling updates. No production code changes.

• Dependencies
  • cuelang.org/go v0.14.1 (from v0.5.0-beta)
  • spf13/pflag v1.0.7; spf13/cobra v1.9.1 (indirect)
  • cockroachdb/apd v3.2.1 (indirect, replaces v2)
  • google/go-cmp v0.7.0
  • golang.org/x: crypto 0.40.0, net 0.42.0, mod 0.26.0, oauth2 0.30.0, sync 0.16.0, sys 0.34.0, term 0.33.0, text 0.27.0, tools 0.35.0
  • New indirects for CUE/tooling (e.g., emicklei/proto, go-toml/v2, txtpbfmt, packagestest); removed mpvl/unique

[cubic-dev-ai]

No issues found across 2 files

[jguionnet]

Please provide details on the Snyk failure

[Chaitanyareddy0702]

Please provide details on the Snyk failure

Hi @jguionnet , The Snyk is failing due to the vulnerable module [gopkg.in/yaml.v3](http://gopkg.in/yaml.v3) which is deprecated and moved to [go.yaml.in/yaml/v3](http://go.yaml.in/yaml/v3). This module is being imported from the sigs.k8s.io/controller-tools which is still using the deprecated go module [gopkg.in/yaml.v3].