⬆️ [Dependency]: Bump Sodium minimum requirement to 2.2.5

[MariusStorhaug]

Summary

PSModule/GitHub still pins Sodium 2.2.2 in src/functions/public/Secrets/Set-GitHubSecret.ps1. PSModule/Context has already been updated and validated against Sodium 2.2.5, including a cross-version compatibility check confirming that data written with 2.2.2 remains readable with 2.2.5.

Why update

Sodium 2.2.5 includes the cumulative improvements from 2.2.3–2.2.5 with no breaking API changes for the calls used by PSModule/GitHub.

Key improvements from Sodium release notes:

• New-SodiumKeyPair -Seed: ~49% lower per-call overhead
• ConvertFrom-SodiumSealedBox: ~44% lower per-call overhead
• ConvertTo-SodiumSealedBox: ~22% lower per-call overhead
• Cold import: ~37% faster
• Fail-fast validation for malformed sealed payloads and invalid key shapes

Current usage found

• src/functions/public/Secrets/Set-GitHubSecret.ps1
  • #Requires -Modules @{ ModuleName = 'Sodium'; RequiredVersion = '2.2.2'}

Requested change

Update the minimum Sodium requirement from 2.2.2 to 2.2.5 in PSModule/GitHub.

Acceptance criteria

• Update the #Requires Sodium version pin to 2.2.5
• Confirm existing secret-related flows still work unchanged
• Note that PSModule/Context already validated the 2.2.2 -> 2.2.5 compatibility boundary for stored encrypted content