Update to go 1.23

[gerardsn]

• remove golang.org/x/exp added in Have s2s flow take verifier supported DID methods into account #3374

[gerardsn]

the failing e2e test seems to be a timing issue as I can only reproduce it about 50% of the time locally

[reinkrul]

Related change in Go: https://go.googlesource.com/go/+/b691da9f788f27eb3d5035f3dbdc15c107d71ef9%5E%21/

[gerardsn]

https://pkg.go.dev/crypto/x509#ParseCertificate

Before Go 1.23, ParseCertificate accepted certificates with negative serial numbers. This behavior can be restored by including "x509negativeserial=1" in the GODEBUG environment variable.

need to investigate if pkiO issues certs with negative serials

[gerardsn]

pkiO certificates use serialnumbers > 0, so they are not impacted by this change

from https://cp.pkioverheid.nl/pkioverheid-por-v5.0.html

7.1.2.3.2 serialNumber
All subscriber certificates SHALL have a serialNumber field. This field SHALL have a value meeting the following requirements:

it SHALL be be greater than zero (0), and
...