resolve CVE-2022-27664

[cbodonnell]

This PR updates the golang.org/x/net dependency to resolve CVE-2022-27664.

Trivy scan showing this vulnerability trivy fs --ignore-unfixed --severity CRITICAL,HIGH .:

go.mod (gomod)

Total: 2 (HIGH: 2, CRITICAL: 0)

┌─────────────────────┬────────────────┬──────────┬───────────────────────────────────┬───────────────────────────────────┬─────────────────────────────────────────────────────────────┐
│       Library       │ Vulnerability  │ Severity │         Installed Version         │           Fixed Version           │                            Title                            │
├─────────────────────┼────────────────┼──────────┼───────────────────────────────────┼───────────────────────────────────┼─────────────────────────────────────────────────────────────┤
│ golang.org/x/crypto │ CVE-2022-27191 │ HIGH     │ 0.0.0-20220214200702-86341886e292 │ 0.0.0-20220314234659-1baeb1ce4c0b │ golang: crash in a golang.org/x/crypto/ssh server           │
│                     │                │          │                                   │                                   │ https://avd.aquasec.com/nvd/cve-2022-27191                  │
├─────────────────────┼────────────────┤          ├───────────────────────────────────┼───────────────────────────────────┼─────────────────────────────────────────────────────────────┤
│ golang.org/x/net    │ CVE-2022-27664 │          │ 0.0.0-20220225172249-27dd8689420f │ 0.0.0-20220906165146-f3363e06e74c │ golang: net/http: handle server errors after sending GOAWAY │
│                     │                │          │                                   │                                   │ https://avd.aquasec.com/nvd/cve-2022-27664                  │
└─────────────────────┴────────────────┴──────────┴───────────────────────────────────┴───────────────────────────────────┴─────────────────────────────────────────────────────────────┘

I didn't update golang.org/x/crypto since it only seems relevant to the golang.org/x/crypto/ssh server.

[erikdubbelboer]

This CVE is completely irrelevant for fasthttp as we don't use the http2 code from golang.org/x/net. But it can't hurt to update our dependencies so I'll merge it anyways.