Bump Go toolchain to 1.25.9 (#5004)

## Summary

Bumps the Go toolchain from 1.25.7 to 1.25.9 across all three `go.mod`
files.

Notable upstream fixes ([release
notes](https://go.dev/doc/devel/release#go1.25.minor)):
- `crypto/tls` and `crypto/x509` security fixes
- `html/template` security fixes
- `archive/tar` security fix
- `os` package security fixes
- Compiler and runtime bug fixes

This pull request and its description were written by Isaac.

---------

Co-authored-by: Andrew Nester <andrew.nester.dev@gmail.com>

Author: pietern

NEXT_CHANGELOG.md

@@ -10,4 +10,7 @@
 
 ### Dependency updates
 
+* Bump `github.com/databricks/databricks-sdk-go` from v0.126.0 to v0.127.0 ([#4984](https://github.com/databricks/cli/pull/4984)).
+* Bump Go toolchain to 1.25.9 ([#5004](https://github.com/databricks/cli/pull/5004))
+
 ### API Changes

bundle/internal/tf/codegen/go.mod

@@ -2,7 +2,7 @@ module github.com/databricks/cli/bundle/internal/tf/codegen
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.9
 
 require (
 	github.com/hashicorp/go-version v1.7.0

go.mod

@@ -2,7 +2,7 @@ module github.com/databricks/cli
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.9
 
 require (
 	dario.cat/mergo v1.0.2 // BSD-3-Clause

tools/go.mod

@@ -2,7 +2,7 @@ module github.com/databricks/cli/tools
 
 go 1.25.0
 
-toolchain go1.25.7
+toolchain go1.25.9
 
 require (
 	4d63.com/gocheckcompilerdirectives v1.3.0 // indirect