chore(deps): bump cloud-commitments-go pins to main 9dae64b (#337, #338, #339) #60

Bump the four cloud-commitments-go pins (pkg, providers/aws, providers/azure, providers/gcp) from 16b57954c6bc to current go main 9dae64b216d4 (go #337, #338, #339).

Why: go #338 changes insurance.Config.APIKey from string to insurance.Secret (source-breaking), #339 rejects API keys outside printable ASCII 0x21-0x7E and runs decode errors through clean/redact/truncate, #337 stops decode errors echoing uncapped vendor values. Platform does the same bump in platform#791 / PR #805 (in gate).

Scope:

• go.mod/go.sum: four pins to v0.0.0-20261012130811-9dae64b216d4
• tools/archera_comparison.go: build the key with insurance.NewSecret, read it back with Reveal() for archeraError redaction
• tests: update the insurance.Config literals; add a test for a key that NewClient now rejects; refresh the stale go#336 comment
• archeraError's strip/mask/skeleton/cap pipeline (fix(archera): mask the API key after sanitizing error text #59) stays as defense in depth

Refs: go PRs #337, #338, #339; go issue #336; platform#791, PR #805.