Use replace directive in go.mod to use golang.org/x/net to be at v0.26.0

[troy0820]

What does this change

This should get rid of the references to the golang.org/x/net < v0.26.0 in the go.sum which triggers scanners to pick this up as a CVE.

What issue does it fix

Community issue on a call.

Notes for the reviewer

None

Checklist

• Did you write tests?
• Did you write documentation?
• Did you change porter.yaml or a storage document record? Update the corresponding schema file.
• If this is your first pull request, please add your name to the bottom of our Contributors list. Thank you for making Porter better! 🙇‍♀️

[troy0820]

go mod graph still shows the old deps in there. We may need to just update them.