Security update for elemental-toolkit

This update for elemental-toolkit fixes the following issue - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260277). Changes for elemental-toolkit: - Update to version 2.1.6: * Bump golang.org/x/net to v0.55.0 (bsc#1267168) * Bump golang.org/x/crypto to v0.52.0 (bsc#1266187) * Update orange flavor * Install hugo from the OS repositories * Bump actions/upload-artifact to v7 * Bump actions/cache to v5 * Bump golangci/golangci-lint-action to v9 * Bump github.com/spf13/cobra library * Bump github.com/jaypipes/ghw library * Bump github.com/bramvdbogaerde/go-scp library * Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186) * Bump github.com/ulikunitz/xz library * Do not clean cache on PRs from forks