The kms Go SDK module directly imports luxfi/keys (NewServiceIdentity / ServiceIdentity). Its v1.2.0 pin was force-moved; adopt the stable v1.4.1, regenerate go.sum from the current remote. Builds clean (CGO_ENABLED=0). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>