fix cve

[catpineapple]

What problem does this PR solve?

Issue Number: close #xxx

Related PR: #xxx

Problem Summary:

Release note

None

Check List (For Author)

• Test

  • Regression test
  • Unit Test
  • Manual test (add detailed scripts or steps below)
  • No need to test or manual test. Explain why:
    • This is a refactor/code format and no logic has been changed.
    • Previous test can cover this change.
    • No code files have been changed.
    • Other reason

• Behavior changed:

  • No.
  • Yes.

• Does this need documentation?

  • No.
  • Yes.

Check List (For Reviewer who merge this PR)

• Confirm the release note
• Confirm test cases
• Confirm document
• Add branch pick label

[Copilot]

Pull Request Overview

This PR addresses a CVE by updating the golang.org/x/oauth2 dependency from v0.23.0 to v0.27.0 and adds the Apache license header to a previously unlicensed YAML file.

• Updated golang.org/x/oauth2 from v0.23.0 to v0.27.0 to fix a security vulnerability
• Added Apache License header to deployment.yaml for license compliance

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
go.mod	Updated golang.org/x/oauth2 dependency from v0.23.0 to v0.27.0
go.sum	Added go.sum entry for oauth2 v0.27.0 (incomplete - missing hash entry)
doc/examples/disaggregated/fdb/deployment.yaml	Added Apache License 2.0 header to previously unlicensed file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.