Bump `go.opentelemetry.io/otel` to 1.41.0

### What would you like to be added? The `go.opentelemetry.io/otel` has the CVE-2026-29181 high severity vulnerability reported. We have version 1.40.0 in both 3.5 and 3.6. We should also bump `go.opentelemetry.io/otel/sdk` to 1.43.0, due to CVE-2026-39883. We need to update the dependency, and add a CHANGELOG entry. ### Why is this needed? To address CVE-2026-29181 and CVE-2026-39883.