Add govulncheck workflow

[cbosdo]

What does this PR change?

run govulncheck on each PR

Changelogs

Make sure the changelogs entries you are adding are compliant with https://github.com/uyuni-project/uyuni/wiki/Contributing#changelogs and https://github.com/uyuni-project/uyuni/wiki/Contributing#uyuni-projectuyuni-repository

If you don't need a changelog check, please mark this checkbox:

• No changelog needed

If you uncheck the checkbox after the PR is created, you will need to re-run changelog_test (see below)

Before you merge

Check How to branch and merge properly!

[cbosdo]

I have to bump to go 1.21 to run govulncheck as it doesn't build on 1.20. I still have to get go 1.21 to be used on OBS builds for AlmaLinux 8

[cbosdo]

Adding the go1.21 bump again now that OBS build with it on AlmaLinux 8

[deneb-alpha]

Adding the go1.21 bump again now that OBS build with it on AlmaLinux 8

what changed about that stream? do you know if autobuild did an update of the stream or something different?

[cbosdo]

Adding the go1.21 bump again now that OBS build with it on AlmaLinux 8

what changed about that stream? do you know if autobuild did an update of the stream or something different?

Quoting the answer from autobuild:

the public key of the appstream changed, so the DoD (which still had the old key) was not working.