chore(deps): drop Java + npm Dependabot sections; add gomod (#154) #186

Job	Run time
Semgrep (SAST)	21s
jscpd (duplication < 3% on touched code)	14s
SBOM (SPDX + CycloneDX)	15s
OSV-Scanner (SCA)	7s
Trivy (filesystem + container scan)	8s
Gitleaks (secret scan)	13s
	1m 18s

Provide feedback