Please address the comments from this code review:

## Overall Comments
- The `go` directive in `go.mod` was changed to `1.25.3`, which is not a valid Go toolchain version; consider reverting to a supported version (e.g., 1.22.x) or the project’s standard Go version to avoid tooling/build issues.
- In `sensor/kubernetes/complianceoperator/updater.go`, `IsResourceAvailable` is called once per optional resource and performs `ServerResourcesForGroupVersion` each time; consider caching the discovery result per group-version and reusing it to avoid repeated discovery calls.

## Individual Comments

### Comment 1
<location> `sensor/kubernetes/listener/resource_event_handler.go:159` </location>
<code_context>
 	if err != nil {
 		log.Errorf("Failed to check the availability of Compliance Operator resources: %v", err)
 	}
+	customRulesAvailable, err := complianceoperator.IsResourceAvailable(k.client.Kubernetes(), complianceoperator.CustomRule)
+	if err != nil {
+		log.Errorf("Failed to check the availability of Compliance Operator Custom Rules, they won't be tracked: %v", err)
+	}
 	if coAvailable {
</code_context>

<issue_to_address>
**suggestion (performance):** Avoid calling IsResourceAvailable for custom rules when the compliance operator itself is not available.

`customRulesAvailable` is computed even when `coAvailable` is false, and both checks trigger discovery. When CO CRDs are missing, this causes an unnecessary discovery call and log noise for custom rules that aren’t relevant. Move the custom-rules availability check inside the `if coAvailable` block (and reuse any existing discovery info if possible) to avoid extra API calls and logs.

```suggestion
	coCrdWatcher := crd.NewCRDWatcher(&k.stopSig, dynamicSif)
	if err != nil {
		log.Errorf("Failed to check the availability of Compliance Operator resources: %v", err)
	}
	if coAvailable {
		log.Info("Initializing compliance operator informers")
		customRulesAvailable, err := complianceoperator.IsResourceAvailable(k.client.Kubernetes(), complianceoperator.CustomRule)
		if err != nil {
			log.Errorf("Failed to check the availability of Compliance Operator Custom Rules, they won't be tracked: %v", err)
		}

		complianceResultInformer = crdSharedInformerFactory.ForResource(complianceoperator.ComplianceCheckResult.GroupVersionResource()).Informer()
		complianceScanInformer = crdSharedInformerFactory.ForResource(complianceoperator.ComplianceScan.GroupVersionResource()).Informer()
		complianceSuiteInformer = crdSharedInformerFactory.ForResource(complianceoperator.ComplianceSuite.GroupVersionResource()).Informer()
		complianceRemediationInformer = crdSharedInformerFactory.ForResource(complianceoperator.ComplianceRemediation.GroupVersionResource()).Informer()

		if customRulesAvailable {
```
</issue_to_address>

Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="sensor/kubernetes/complianceoperator/dispatchers/complianceoperatorcustomrules.go" line_range="38-41" />
<code_context>
+		return nil
+	}
+
+	if err := runtime.DefaultUnstructuredConverter.FromUnstructured(unstructuredObject.Object, customRule); err != nil {
+		log.Errorf("error converting unstructured to compliance custom rule: %v", err)
+		return nil
+	}
</code_context>
<issue_to_address>
**suggestion:** Include object identity in the conversion error log for easier debugging.

This log doesn’t include any identifying info about the object that failed conversion. Please include at least name/namespace or GVK from `unstructuredObject` with the error so we can tell which CustomRule is failing.

```suggestion
	if err := runtime.DefaultUnstructuredConverter.FromUnstructured(unstructuredObject.Object, customRule); err != nil {
		log.Errorf(
			"error converting unstructured to compliance custom rule %s/%s (%s): %v",
			unstructuredObject.GetNamespace(),
			unstructuredObject.GetName(),
			unstructuredObject.GetObjectKind().GroupVersionKind().String(),
			err,
		)
		return nil
	}
```
</issue_to_address>