Bump golang.org/x/vuln from 1.0.2 to 1.0.3 in /internal/tools (#484)

Bump golang.org/x/vuln from 1.0.2 to 1.0.3 in /internal/tools (#484) #1412