Relates to #117

chore(CODEOWNERS): remove deactivated accounts

See merge request !522

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Co-authored-by: Luke Hollinda <lhollinda@gitlab.com>

Add Go 1.26 FIPS to CI matrix

See merge request !521

Merged-by: Matias Alvarez <malvarez@gitlab.com>
Approved-by: Matias Alvarez <malvarez@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

Aligns with the fairway proto change that moved PostgreSQLFormat off
PostgreSQLSecret onto PostgreSQL itself, and adds support for the new
CLOUDSQL_IAM format introduced for Cloud SQL Auth Proxy with
--auto-iam-authn.

When format is CLOUDSQL_IAM:

- The Secrets provider is not required (no Kubernetes Secret is mounted).
- dsn() short-circuits to cloudsqlIAMDSN(), which builds a passwordless
  postgres:// URL from PostgreSQL.host/port/database_name/username.
- pool_host and pool_port are honored when connection pooling is enabled
  (future-proofing; today CloudSQL Auth Proxy exposes a single endpoint).
- Defense-in-depth: each required field is checked for empty/zero and
  reports ErrMissingConfigField on violation, even though the fairway CEL
  rules already enforce presence at proto-validate time.

projection() now reads format from PostgreSQL.format instead of
secret_ref.format (the field's new home post-fairway refactor).

feat(v2/postgres): support CLOUDSQL_IAM passwordless DSN

See merge request !523

Merged-by: Elliot Forbes <eforbes@gitlab.com>
Approved-by: Elliot Forbes <eforbes@gitlab.com>
Reviewed-by: GitLab Duo <gitlab-duo@gitlab.com>
Co-authored-by: s.abbasi <sabbasi@gitlab.com>