cmd/go: pseudoversions can refer to external commits [1.11 backport] #31195
Description
@FiloSottile requested issue #31191 to be considered for backport to the next 1.11 minor release.
@gopherbot please open backport issues for this. It is a security issue and we want to make sure the entire modules ecosystem will reject the external pseudoversions.