[8.18] feat(fips): bump sarama to drop kerberos lib in fips mode (backport #16032)

[mergify]

Motivation/summary

bump sarama to latest commit and verify kerberos lib is not linked in the binary

Checklist

• Update CHANGELOG.asciidoc
• Documentation has been updated

For functional changes, consider:

• Is it observable through the addition of either logging or metrics?
• Is its use being published in telemetry to enable product improvement?
• Have system tests been added to avoid regression?

How to test these changes

build binary in fips mode
validate kerberos lib in not linked in the final binary

Related issues

Closes #15860

---

This is an automatic backport of pull request #16032 done by [Mergify](https://mergify.com).

[mergify]

Cherry-pick of ac609da has failed:

On branch mergify/bp/8.18/pr-16032
Your branch is up to date with 'origin/8.18'.

You are currently cherry-picking commit ac609dae.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   NOTICE.txt
	both modified:   go.mod
	both modified:   go.sum

no changes added to commit (use "git add" and/or "git commit -a")

To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally

[mergify]

This pull request has not been merged yet. Could you please review and merge it @kruskall? 🙏