chore(go): replace releaseprep with vociferate flows

.gitea/workflows/push-validation.yml

@@ -34,6 +34,12 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Install security tools
+        run: |
+          set -euo pipefail
+          go install github.com/securego/gosec/v2/cmd/gosec@v2.22.3
+          go install golang.org/x/vuln/cmd/govulncheck@v1.1.4
+
       - name: Install AWS CLI v2
         uses: ankurk91/install-aws-cli-action@v1
 
@@ -52,6 +58,12 @@ jobs:
           printf '{\n  "total": "%s"\n}\n' "$total" > coverage-summary.json
           printf 'total=%s\n' "$total" >> "$GITHUB_OUTPUT"
 
+      - name: Run security analysis
+        run: |
+          set -euo pipefail
+          "$(go env GOPATH)/bin/gosec" ./...
+          "$(go env GOPATH)/bin/govulncheck" ./...
+
       - name: Generate coverage badge
         env:
           COVERAGE_TOTAL: ${{ steps.coverage.outputs.total }}
@@ -121,26 +133,3 @@ jobs:
       - name: Run behavior suite on main pushes
         if: ${{ github.ref == 'refs/heads/main' }}
         run: ./script/run-behavior-suite-docker.sh
-
-      - name: Recommend next release tag on main pushes
-        if: ${{ github.ref == 'refs/heads/main' }}
-        run: |
-          set -euo pipefail
-
-          if recommended_tag="$(go run git.hrafn.xyz/aether/vociferate/cmd/releaseprep@latest --recommend --root . --version-file internal/homesick/version/version.go --version-pattern 'const String = "([^"]+)"' --changelog changelog.md 2>release-recommendation.err)"; then
-            {
-              echo
-              echo '## Release Recommendation'
-              echo
-              echo "- Recommended next tag: \\`${recommended_tag}\\`"
-            } >> "$GITHUB_STEP_SUMMARY"
-          else
-            recommendation_error="$(tr '\n' ' ' < release-recommendation.err | sed 's/[[:space:]]\+/ /g' | sed 's/^ //; s/ $//')"
-            echo "::warning::${recommendation_error}"
-            {
-              echo
-              echo '## Release Recommendation'
-              echo
-              echo "- No recommended tag emitted: ${recommendation_error}"
-            } >> "$GITHUB_STEP_SUMMARY"
-          fi