chore: update Go to v1.27 (#39068)

Only made some necessary changes:

1. remove `GOEXPERIMENT`, only use jsonv2
1. `make fmt`
* `SigningKey` and `Signature` were affected due to some bugs in the
toolchain, so rewrote them
1. remove or fix fragile magic numbers and strings
    * the outputs of image/gzip/zlib packages are different
1. update "nolint" comments for the changed lint behaviors
1. add `tls.MLKEM1024`

modules/packages/alpine/metadata_test.go

@@ -95,8 +95,8 @@ func TestParsePackage(t *testing.T) {
 		p, err := ParsePackage(data)
 		assert.NoError(t, err)
 		assert.NotNil(t, p)
-
-		assert.Equal(t, "Q1SRYURM5+uQDqfHSwTnNIOIuuDVQ=", p.FileMetadata.Checksum)
+		// FIXME: the logic is strange in ParsePackage, need to figure out how to calculate the checksum correctly
+		assert.Equal(t, "Q1GfcV5dUrPr1xIRekqPYGehdxjL8=", p.FileMetadata.Checksum)
 	})
 
 	t.Run("TooManyDependencyEntries", func(t *testing.T) {