Bump go dependencies only.
Does not change the current expected device app hash.
Use tkey-libs v0.1.1.
This does not change the current expected device app hash (x25519/app.bin.sha512), when built in the container we use (ghcr.io/quite/tkey-apps-builder:1).
It's simply the first tagged release.