Add fix-state: not-fixed to GO-2026-5932 ignore entry

The GO-2026-5932 (golang.org/x/crypto) ignore entry lacked the
fix-state: not-fixed field, making it a permanent unconditional
suppress instead of an auto-expiring one. Without fix-state, grype
keeps the entry active even after a fix is published, silently hiding
the CVE rather than re-reporting it for remediation.

Add fix-state: not-fixed so the entry auto-expires when the OSV
advisory records an available fix.

Signed-off-by: Daniel Farrell <dfarrell@redhat.com>

Author: dfarrell07

.grype.yaml

@@ -7,5 +7,6 @@ ignore:
 
   # No fixed version available in Go module registry; Unknown severity
   - vulnerability: GO-2026-5932
+    fix-state: not-fixed
     package:
       name: golang.org/x/crypto