feat: derive stream enum validators from openapi spec

[jscaltreto]

Summary

The quicknode_stream resource rejected valid networks like arc-mainnet because its network validation list was a hand-maintained Go slice that had drifted behind the QuickNode Streams API. This PR regenerates the vendored API clients and replaces the hand-written enum validators with values generated directly from the OpenAPI spec, so they can no longer fall out of sync. It also bumps a few transitive dependencies to clear newly-disclosed CVEs flagged by the Trivy scan.

Detail

• Regenerated vendored specs (make vendor): refreshed the QuickNode and Streams OpenAPI specs and their generated clients. The Streams spec adds a number of networks (including arc-mainnet), datasets, and destination types.
• Added a spec-driven enum generator (api/streams/gen/generate.go): a go:generate program that reads the CreateStreamDto enums from streams-openapi.json and emits api/streams/enums.gen.go (Networks, Datasets, Destinations, Regions). Adding another enum is a one-line entry in its table.
• Wired generation into the existing flow: a //go:generate go run gen/generate.go directive in streams.go runs alongside the client generation under make vendor / go generate ./api/.... Invoked by explicit filename because the generator carries a //go:build ignore constraint.
• Pointed the validators at the generated slices: NetworkValidator, DatasetValidator, DestinationValidator, and RegionValidator now reference streams.*. This also corrected pre-existing drift — DestinationValidator had a stale function value and was missing azure/kafka, and DatasetValidator was missing several values.
• Left StatusValidator hand-maintained: the create schema only permits active/paused, but a stream can be read back as terminated/completed, so it intentionally does not derive from the spec.
• Bumped transitive dependencies to resolve Trivy findings from newly-disclosed CVEs (independent of the changes above; the affected packages are indirect deps):
  • golang.org/x/crypto v0.46.0 → v0.52.0 (x/crypto/ssh advisories)
  • golang.org/x/net v0.48.0 → v0.55.0
  • golang.org/x/sys v0.39.0 → v0.45.0

Testing

• make vendor and make generate produce no diffs (generation is idempotent).
• go build ./... and go vet ./... pass.
• Verified arc-mainnet is present in the generated Networks and accepted by NetworkValidator.
• trivy fs reports 0 vulnerabilities after the dependency bump (was 21).

Documentation

No documentation changes required.