Release 0.3.34: Azure policy example fix + start_datecode fix + Go/grpc security bumps

[bshutterkion]

Summary

Bundles four fixes for release 0.3.34:

1. kion_azure_policy example was broken. A customer copied examples/resources/kion_azure_policy/resource.tf and hit:

   Error: url: .../v3/azure-policy, method: POST, status: 400, body:
   {"message":"The Azure Policy Definition is invalid. Reason: ...
   'Could not find member \'if\' on object of type \'PolicyDefinitionProperties\'...'"}
   

   Root cause: the provider forwards the policy attribute as the properties body of Azure's Policy Definition API, so the rule MUST be wrapped in policyRule. The example used top-level if / then. The top-level Terraform parameters attribute was also misused — re-declaring the parameter schema instead of using the runtime { "paramName": { "value": ... } } form.

   Fix:

   • All four examples now wrap the rule in policyRule and include displayName / mode.
   • Parameter schemas moved inside the policy JSON's own parameters block.
   • Top-level parameters attribute uses the runtime value format.
   • Added a header comment explaining the distinction.
   • docs/resources/azure_policy.md synced.

2. kion_custom_account start_datecode validation — cherry-picked from Fix start_datecode validation failing for computed values (#143) #145 (now closed). Replaces GetOk() with GetRawConfig() in CustomizeDiff so computed values (e.g. formatdate()) aren't incorrectly rejected. Closes Custom account start_datecode validation fails when using a computed value #143.

3. Security: grpc-go bump — cherry-picked from fix: update Go and grpc to address security findings #146 (now closed, thanks @enel1221). Bumps google.golang.org/grpc from v1.61.1 to v1.79.3 to address GHSA-p77j-4mvh-x3m3 / CVE-2026-33186.

4. Security: Go toolchain bump — cherry-picked from fix: update Go and grpc to address security findings #146 (thanks @enel1221). Bumps Go release line from 1.22 to 1.25 with toolchain go1.25.9 to address Go stdlib CVE-2025-68121. CI workflows (release.yml, golangci-lint.yml) pinned to go1.25.9.

Version bumped to 0.3.34 (final release version).

Test plan

• go build ./... clean
• go test ./... green
• make install builds the combined binary at ~/.terraform.d/plugins/github.com/kionsoftware/kion/0.3.34/<os_arch>/
• Customer validates the corrected kion_azure_policy example against their sandbox (applies without the 400)
• Regression check: kion_custom_account with start_datecode = formatdate(...) plans and applies
• Release pipeline (release.yml) produces a clean Grype scan on the artifact