build(deps): update common-fate/granted to v0.39.0

This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [common-fate/granted](https://github.com/common-fate/granted) | minor | `v0.38.0` → `v0.39.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>common-fate/granted (common-fate/granted)</summary>

### [`v0.39.0`](https://github.com/fwdcloudsec/granted/releases/tag/v0.39.0)

[Compare Source](fwdcloudsec/granted@v0.38.0...v0.39.0)

Granted v0.39.0 is the first release published under the [fwdcloudsec](https://github.com/fwdcloudsec) organization. This release includes new features, bug fixes, and updates to the release infrastructure.

#### Release Infrastructure Changes

Starting with v0.39.0, Granted releases are published to new infrastructure under the `granted.dev` domain:

- **Binary downloads** are now hosted at [releases.granted.dev](https://releases.granted.dev)
- **Linux APT repository** has moved to `apt.releases.granted.dev` — see the [installation docs](https://docs.granted.dev/getting-started) for updated setup instructions
- **Homebrew** (`brew install fwdcloudsec/granted/granted`) now builds from source via the [fwdcloudsec/homebrew-granted](https://github.com/fwdcloudsec/homebrew-granted) tap. Prebuilt macOS binaries are not currently available — if you need them, please [open a discussion](https://github.com/fwdcloudsec/granted/discussions)
- **GPG signing key** has been updated ([fwdcloudsec/granted-docs#4](fwdcloudsec/granted-docs#4)). The APT repository signing key has been updated too — see the installation docs for the new key

Previous releases remain available at `releases.commonfate.io`.

#### Features

- **OAuth Authorization Code + PKCE flow for SSO login** — adds a more secure SSO authentication method ([#&#8203;923](fwdcloudsec/granted#923)) by [@&#8203;dgilmanuni](https://github.com/dgilmanuni)
- **Hierarchical RoleSessionName resolution** — role session names are now resolved hierarchically when assuming roles ([#&#8203;884](fwdcloudsec/granted#884)) by [@&#8203;FredPerr](https://github.com/FredPerr)
- **`GRANTED_BROWSER_PROFILE` env var** — override the browser profile used for console sessions via an environment variable ([#&#8203;914](fwdcloudsec/granted#914)) by [@&#8203;billyjbryant](https://github.com/billyjbryant)
- **Zen browser support** — native support for the Zen browser ([#&#8203;930](fwdcloudsec/granted#930)) by [@&#8203;meyerjrr](https://github.com/meyerjrr)

#### Bug Fixes

- Fix `--mfa-token` flag being ignored in credential process mode ([#&#8203;908](fwdcloudsec/granted#908)) by [@&#8203;dafujii](https://github.com/dafujii)
- Fix AWS profile being set incorrectly when role chaining ([#&#8203;841](fwdcloudsec/granted#841)) by [@&#8203;raine-tingley](https://github.com/raine-tingley)
- Fix Nix install path detection for fish and tcsh shell aliases ([#&#8203;921](fwdcloudsec/granted#921)) by [@&#8203;pyrex41](https://github.com/pyrex41)
- Fix SSO browser stdout noise ([#&#8203;916](fwdcloudsec/granted#916)) by [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim)
- Fix `TooManyRequests` exception handling ([#&#8203;912](fwdcloudsec/granted#912)) by [@&#8203;silvaalbert](https://github.com/silvaalbert)
- Fix AWS config directory permissions ([#&#8203;843](fwdcloudsec/granted#843)) by [@&#8203;jescarri](https://github.com/jescarri)
- Fix `ExportCredentialSuffix` nil handling ([#&#8203;915](fwdcloudsec/granted#915)) by [@&#8203;supergibbs](https://github.com/supergibbs)
- Fix help message for `browser set` command ([#&#8203;909](fwdcloudsec/granted#909)) by [@&#8203;LZong-tw](https://github.com/LZong-tw)
- Fix `--ref` flag when adding git profile registries ([#&#8203;864](fwdcloudsec/granted#864)) by [@&#8203;chrnorm](https://github.com/chrnorm)

#### Console Service Map

Added support for: AWS Control Tower, CloudFront, ElastiCache, SQS, Cognito, and Global Accelerator ([#&#8203;871](fwdcloudsec/granted#871), [#&#8203;877](fwdcloudsec/granted#877), [#&#8203;893](fwdcloudsec/granted#893))

#### Housekeeping

- Upgraded to Go 1.25 and renamed module to `github.com/fwdcloudsec/granted` ([#&#8203;913](fwdcloudsec/granted#913))
- Removed legacy Common Fate integrations and plugins ([#&#8203;855](fwdcloudsec/granted#855), [#&#8203;861](fwdcloudsec/granted#861))
- Cleaned up registry package ([#&#8203;805](fwdcloudsec/granted#805)) by [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev)
- Dependency updates ([#&#8203;922](fwdcloudsec/granted#922)) by [@&#8203;ericofusco](https://github.com/ericofusco)

#### New Contributors

- [@&#8203;jescarri](https://github.com/jescarri), [@&#8203;raine-tingley](https://github.com/raine-tingley), [@&#8203;EloyTolosaDev](https://github.com/EloyTolosaDev), [@&#8203;FredPerr](https://github.com/FredPerr), [@&#8203;mikegray](https://github.com/mikegray), [@&#8203;LZong-tw](https://github.com/LZong-tw), [@&#8203;dafujii](https://github.com/dafujii), [@&#8203;supergibbs](https://github.com/supergibbs), [@&#8203;ericofusco](https://github.com/ericofusco), [@&#8203;pyrex41](https://github.com/pyrex41), [@&#8203;benjamin-pilgrim](https://github.com/benjamin-pilgrim), [@&#8203;silvaalbert](https://github.com/silvaalbert), [@&#8203;billyjbryant](https://github.com/billyjbryant), [@&#8203;dgilmanuni](https://github.com/dgilmanuni)

Thank you to everyone who contributed to this release!

**Full Changelog**: <fwdcloudsec/granted@v0.38.0...v0.39.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlJlbm92YXRlIEJvdCIsImF1dG9tYXRpb246Ym90LWF1dGhvcmVkIiwiZGVwZW5kZW5jeS10eXBlOjptaW5vciJdfQ==-->

Author: ECG Bot

chezmoi/dot_config/aquaproj-aqua/aqua.yaml

@@ -16,7 +16,7 @@ packages:
 - name: mikefarah/[email protected]
   description: yq is a portable command-line YAML processor
   link: https://github.com/mikefarah/yq
-- name: common-fate/granted@v0.38.0
+- name: common-fate/granted@v0.39.0
   description: The easiest way to access your cloud
   link: https://github.com/common-fate/granted
 - name: elkowar/[email protected]