ci/builder: upgrade to Hugo v0.128

[benesch]

The upgrade to Hugo v0.124.1 in #27679 has broken the deploy_website build. The issue appears to be a bug in the Go AWS SDK version that Hugo v0.124.1 uses that causes credential refreshing to sporadically fail. The latest version of Hugo (v0.128) incoporates a Go AWS SDK upgrade that hopefully fixes the issue.

Motivation

• This PR fixes a recognized bug.

Checklist

• This PR has adequate test coverage / QA involvement has been duly considered. (trigger-ci for additional test/nightly runs)
• This PR has an associated up-to-date design doc, is a design doc (template), or is sufficiently small to not require a design.
• If this PR evolves an existing $T ⇔ Proto$T mapping (possibly in a backwards-incompatible way), then it is tagged with a T-proto label.
• If this PR will require changes to cloud orchestration or tests, there is a companion cloud PR to account for those changes that is tagged with the release-blocker label (example).
• This PR includes the following user-facing behavior changes:
  • n/a