[8.16](backport #42056) Bump golang.org/x/crypto to v0.31.0

[mergify]

Proposed commit message

Bump golang.org/x/crypto to v0.31.0.

This fixes CVE-2024-45337.

Related issues

• Relates https://github.com/elastic/ingest-dev/issues/4733

---

This is an automatic backport of pull request #42056 done by [Mergify](https://mergify.com).

[mergify]

Cherry-pick of 534ed1e has failed:

On branch mergify/bp/8.16/pr-42056
Your branch is up to date with 'origin/8.16'.

You are currently cherry-picking commit 534ed1e78.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   NOTICE.txt
	both modified:   go.mod
	both modified:   go.sum

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

[botelastic]

This pull request doesn't have a Team:<team> label.