chore(deps): bump OpenTelemetry SDK to fix GO-2026-4394 (#288)