upgrade cometbft and cosmos-sdk for tachyon security fix (backport #3320)

[mergify]

see dydxprotocol/cometbft#55

Summary by CodeRabbit

• Chores
  • Updated core protocol dependencies to newer versions.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

---

This is an automatic backport of pull request #3320 done by [Mergify](https://mergify.com).

[mergify]

Cherry-pick of 07b2c96 has failed:

On branch mergify/bp/release/protocol/v9.x/pr-3320
Your branch is up to date with 'origin/release/protocol/v9.x'.

You are currently cherry-picking commit 07b2c964.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   protocol/go.mod
	both modified:   protocol/go.sum

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}