Add make targets for go workspaces, gosec targets use go run instead of container, run make fix-all

[mozesl-nokia]

Add make targets for go workspaces, gosec targets use go run instead of container, run make fix-all

---

Description

• What changed: Added new make targets, ran the fix-all target
• Why it’s needed: The current way gosec is invoked is "inefficient"; a lot of code in the repo did not have fixes applied
• How it works:
  • The go.work make target creates the workspace with the appropriate modules
  • The gosec targets now use the local gosec install or go run like the linter
    • The version check here would be difficult, since without explicit -ldflags the gosec -version puts out "dev" (still possible through go version -m, put complicated)

---

Related Issue(s)

• None

---

Type of Change

• Refactor

---

Checklist

• Code follows project style guidelines
• Self-reviewed changes
• Tests added/updated
• Documentation added/updated
• All tests and gating checks pass

---

Additional Notes (Optional)

• Known issues: If you have a newer local gosec installed, you will get additional vulnerability errors

---

AI Disclosure

• I have used AI in the creation of this PR.

If so, please describe how:

• Cursor's Grok 4.5 was used to refactor the gosec make targets

[netlify]

✅ Deploy Preview for kpt-porch ready!

Name	Link
🔨 Latest commit	457b313
🔍 Latest deploy log	https://app.netlify.com/projects/kpt-porch/deploys/6a79e587430ecb00089ddc24
😎 Deploy Preview	https://deploy-preview-1149--kpt-porch.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[sonarqubecloud]

Quality Gate failed

Failed conditions
73.9% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud