Regenerated protobuf stubs and bumped google.golang.org/protobuf from
v1.36.10 to v1.36.11 to match protoc-gen-go v1.36.11. The version
mismatch caused a panic in filedesc.unmarshalSeed during init().
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Replace direct golang.org/x/term calls with mcdsl/terminal.ReadPassword
across mciasctl (6 sites), mciasgrpcctl (1 site), and mciasdb (1 site).
Aligns with the new CLI security standard in engineering-standards.md.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Vendor dependencies and expose control program binaries via
nix build. Uses nixpkgs-unstable for Go 1.26 support.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
