CVE-2025-12819: pgbouncer -> 1.25.1

[jasonodoom]

Evidence: CVE-2025-12819 (auto-merge) trace bundle 103c479e248ad317

• Rekor entry: https://rekor.sigstore.dev/api/v1/log/entries?logIndex=1769678355
• Workflow identity: https://github.com/Ad-Astra-Computing/trace/.github/workflows/steward.yml@refs/heads/main
• OIDC issuer: https://token.actions.githubusercontent.com
• Cert run: https://github.com/Ad-Astra-Computing/trace/actions/runs/27230875037
• nixpkgs rev: f7880cff343dd33533b05866afd059655ce25418

Verify locally

gh run download <run-id> --name steward-smoke-<bundle> --dir ./artifact
trace bundle verify ./artifact  # bundle_id=103c479e248ad317

Generated by trace.