fix(security): bump cosmos/evm to GHSA Aug-2026 patched commit (mainnet/v36)

Points the evm dependency at the patched release/v35 tip
(github.com/zeta-chain/evm @ 51190f04, zeta-chain/evm#36) carrying the
statedb underflow/overflow/atomicity guards, the module-account guard
gated on the chain's blocked-receive policy, and the x/ibc/callbacks
packet-timeout context fix.

Logic-only; no module-set/store change, no upgrade handler.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: skosito

go.mod

@@ -415,7 +415,7 @@ replace (
 	// which is a fork of https://github.com/threshold-network/tss-lib
 	github.com/bnb-chain/tss-lib => github.com/zeta-chain/tss-lib v0.0.0-20240916163010-2e6b438bd901
 
-	github.com/cosmos/evm => github.com/zeta-chain/evm v0.0.0-20250821154530-f0addce1e5ac
+	github.com/cosmos/evm => github.com/zeta-chain/evm v0.0.0-20260903155132-51190f042d34
 	github.com/ethereum/go-ethereum => github.com/cosmos/go-ethereum v1.15.11-cosmos-0
 	github.com/libp2p/go-libp2p => github.com/zeta-chain/go-libp2p v0.0.0-20240710192637-567fbaacc2b4
 )

go.sum

@@ -1961,6 +1961,8 @@ github.com/zeebo/errs v1.4.0/go.mod h1:sgbWHsvVuTPHcqJJGQ1WhI5KbWlHYz+2+2C/LSEtC
 github.com/zeebo/xxh3 v1.0.2/go.mod h1:5NWz9Sef7zIDm2JHfFlcQvNekmcEl9ekUZQQKCYaDcA=
 github.com/zeta-chain/evm v0.0.0-20250821154530-f0addce1e5ac h1:OQYitaQxJqWzyGvXq5EGJksQSXK+0XEdjgCc91BsYTM=
 github.com/zeta-chain/evm v0.0.0-20250821154530-f0addce1e5ac/go.mod h1:WfvV0raMAIEEa5MX6kp8VyELvkwBTNw8JNVlAXtKAXA=
+github.com/zeta-chain/evm v0.0.0-20260903155132-51190f042d34 h1:rBuDVBifvIJn0CDHkBpre1+/4pc6P8KuVrTjo1I0tE4=
+github.com/zeta-chain/evm v0.0.0-20260903155132-51190f042d34/go.mod h1:WfvV0raMAIEEa5MX6kp8VyELvkwBTNw8JNVlAXtKAXA=
 github.com/zeta-chain/go-libp2p v0.0.0-20240710192637-567fbaacc2b4 h1:FmO3HfVdZ7LzxBUfg6sVzV7ilKElQU2DZm8PxJ7KcYI=
 github.com/zeta-chain/go-libp2p v0.0.0-20240710192637-567fbaacc2b4/go.mod h1:TBv5NY/CqWYIfUstXO1fDWrt4bDoqgCw79yihqBspg8=
 github.com/zeta-chain/go-tss v0.6.3 h1:c/zSEvI0h7MJ+xxu42M58uBdEWrlzfD3NI1kP/FlWBE=