chore(deps): drop Java + npm Dependabot sections; add gomod #185

Job	Run time
Semgrep (SAST)	27s
OSV-Scanner (SCA)	6s
jscpd (duplication < 3% on touched code)	18s
Gitleaks (secret scan)	12s
SBOM (SPDX + CycloneDX)	16s
Trivy (filesystem + container scan)	9s
	1m 28s

Provide feedback