Update Go to 1.26.10 and golangci-lint to 2.14.0

Updates Go to 1.26.10, from 1.26.5, in CI, go.mod, mise.toml, the development docs and the Vagrant provisioner, and base-images to v0.0.57, which builds the binaries and helper images with the same Go. Go 1.26.10 fixes crypto/x509 security issues: https://go.dev/doc/devel/release#go1.26.10.

golangci-lint moves to 2.14.0 because the runner-linters image is tagged <golangci-lint>-go<go> and 2.14.0-go1.26.10 is the one built for Go 1.26.10. Its new errorsastype analyzer is disabled like the other pending ones (fmtappendf no longer exists in 2.14.0's modernize suite), and the one staticcheck finding (Transport.Dial deprecated) is fixed with DialContext. Supersedes !7382.

The FIPS builds set GOFIPS140=off: golang-fips 1.26.10-1 defaults it to certified, which rejects the GOEXPERIMENT=boringcrypto switch for its OpenSSL backend.