chore(go): replace releaseprep with vociferate flows

.gitea/workflows/pr-validation.yml

@@ -34,6 +34,12 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Install security tools
+        run: |
+          set -euo pipefail
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.22.3
+          go install golang.org/x/vuln/cmd/govulncheck@v1.1.4
+
       - name: Install AWS CLI v2
         uses: ankurk91/install-aws-cli-action@v1
 
@@ -60,6 +66,12 @@ jobs:
           printf '{\n  "total": "%s"\n}\n' "$total" > coverage-summary.json
           printf 'total=%s\n' "$total" >> "$GITHUB_OUTPUT"
 
+      - name: Run security analysis
+        run: |
+          set -euo pipefail
+          "$(go env GOPATH)/bin/gosec" ./...
+          "$(go env GOPATH)/bin/govulncheck" ./...
+
       - name: Generate coverage badge
         env:
           COVERAGE_TOTAL: ${{ steps.coverage.outputs.total }}