chore(deps): bump minio-go and klauspost/compress

[upsetbit]

What

Consolidates the two open dependabot Go-module bumps into a single, tidy PR:

• github.com/klauspost/compress 1.18.6 → 1.19.0 (was chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.19.0 #313)
• github.com/minio/minio-go/v7 7.2.0 → 7.2.1 (was chore(deps): bump github.com/minio/minio-go/v7 from 7.2.0 to 7.2.1 #314)

Why one PR

klauspost/compress is a direct dependency, and minio-go/v7 also requires
it. Landing the two dependabot PRs separately would leave go.sum needing a
rebase between merges and could produce a non-tidy tree. Bumping both and
running a single go mod tidy keeps go.mod/go.sum consistent.

Scope

Only go.mod and go.sum change. go build ./... and go vet ./... pass
locally. No source, no vulnerability alerts open (all 15 dependabot alerts are
already fixed).

Supersedes #313 and #314.

🤖 Generated with Claude Code