security/syft: fix fetch

The port tries to fetch google.golang.org/genproto and its submodules
in different versions for some reason. This confuses our framework to
the point where it cannot fetch the port.

Fix the build by fetching the same (newer) version for both parent and
child. The versions are ~2 months apart, which should pose no problem.

Also mark as only for aarch64, amd64 due to use of modernc.org/sqlite

Approved by: portmgr (build fix blanket)
MFH: 2026Q2