Use the released pg_repo v2.5.4, sbuilder v2.5.0 and sqd v1.2.0 with a verified module graph and no local replacements. Raise the module minimum to Go 1.23 and align the Docker builder with the main services on Go 1.24. Download locked dependencies and use readonly build/test commands. Scope is dependencies and Docker; this repository contains no test files. Validation on Go 1.24.2 with GOWORK=off and published tags: go test -mod=readonly -race -count=1 ./..., go build ./..., go vet ./..., go mod verify; all passed. Independent review completed with no blockers.