#72 Chore: bump Go to 1.27.1 and k8s to v0.37.1

Description of your changes

Part of kubevela/kubevela#7238. Moves kubevela/prism to Go 1.27.1 and k8s.io v0.37.1.

• Go 1.27.1, k8s.io libraries v0.37.1, controller-runtime v0.25.2, controller-tools v0.22.0, with deepcopy and OpenAPI code regenerated
• kubevela/pkg and oam-dev/cluster-gateway now point at the upstream commits that carry the same bump, instead of forks
• sigs.k8s.io/apiserver-runtime is replaced by plain k8s.io/apiserver wiring in cmd/apiserver
• The MutatingAdmissionPolicy admission plugin, on by default in apiserver 0.37, is now off unless enabled with --enable-admission-plugins. On hubs older than 1.36 the API doesn't exist, so its informers never sync and readyz fails. The chart also grants watch on the admission policy resources.
• Dynamic resources: read accessors no longer write to a nil Uns, and the singular name comes from the REST mapping when there is one
• CI and the apiserver image use Go 1.27.1, envtest moves to 1.37, and generate-openapi runs openapi-gen with go run

How has this code been tested

go build, go vet and make unit-test against envtest 1.37.0 on go1.27.1. I also ran the apiserver against a 1.31 envtest hub. readyz passes by default, and with --enable-admission-plugins=MutatingAdmissionPolicy it fails on informer-sync, which is the case the default now avoids.