fix(ci): pin gosec to v2.22.11 — last version supporting Go 1.24

v2.23.0+ requires Go 1.25, which our CI doesn't have yet. v2.24.0
(previously attempted) also requires 1.25.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: haasonsaas

.github/workflows/security.yml

@@ -18,7 +18,7 @@ jobs:
           go-version: '1.24'
 
       - name: Install gosec
-        run: go install github.com/securego/gosec/v2/cmd/gosec@v2.24.0
+        run: go install github.com/securego/gosec/v2/cmd/gosec@v2.22.11
 
       - name: Install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest