sftpgo-plugin-kms/1.0.14-r0: cve remediation (#36776)

sftpgo-plugin-kms/1.0.14-r0: fix GHSA-v778-237x-gjrc

Advisory data:
https://github.com/wolfi-dev/advisories/blob/main/sftpgo-plugin-kms.advisories.yaml

Co-authored-by: octo-sts[bot] <157150467+octo-sts@users.noreply.github.com>

sftpgo-plugin-kms.yaml

@@ -1,7 +1,7 @@
 package:
   name: sftpgo-plugin-kms
   version: 1.0.14
-  epoch: 0
+  epoch: 1
   description: "Additional KMS secret providers for SFTPGo"
   copyright:
     - license: AGPL-3.0-only
@@ -13,6 +13,10 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: 80fef54ef2a087cc8d515a2a330db6ba62350301
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/crypto@v0.31.0
+
   - uses: go/build
     with:
       packages: .