feat: Improve Go integrations

[jonathanio]

Improve the Go integrations and the GoReleaser processes to try and improve testing and building.

Checklist

Please check and confirm the following items have been performed, where
possible, for this Pull Request:

• I have performed a self-review of my code and run any tests locally to check.
• I have added tests that prove my changes are effective and work correctly.
• I have made corresponding changes to the documentation as needed.
• Each commit in, and this pull request, have meaningful subject & body for context.
• I have added type/..., changes/..., and 'release/...' labels, as needed.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[Copilot]

Pull request overview

This PR updates the repository’s Go integration workflows and GoReleaser configuration to improve build/release automation (including container image signing/SBOM-related steps) and streamlines local Task task naming.

Changes:

• Refactors Task task names (dropping the utils: prefix) and removes the GoReleaser “healthcheck” task dependency.
• Expands .goreleaser.yaml with snapshot/source/SBOM/signing/docker release configuration and adds a new scratch-based Dockerfile.
• Updates GitHub Actions workflows for Go integrations and coverage reporting (including Cosign installation).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
Taskfile.yaml	Updates develop task dependencies to renamed tasks.
.task/utils.yaml	Renames utility tasks and keeps pre-check / pre-commit wiring.
.task/go.yaml	Removes the go:healthcheck task and its dependency from builds.
internal/apply/apply.go	Adjusts per-file processing logs and adds lint suppression for function length.
Dockerfile	Adds a scratch image Dockerfile intended for GoReleaser multi-platform builds.
.goreleaser.yaml	Major GoReleaser configuration changes: snapshot/source archives, checksums, SBOMs, signing, docker image publishing.
.github/workflows/go-integrations.yaml	Updates GoReleaser invocation and installs Cosign in CI.
.github/workflows/coverage.yaml	Adjusts Codecov upload ordering and adds additional (duplicated) test-results steps.

Comments suppressed due to low confidence (1)

.github/workflows/coverage.yaml:112

• This second "Process test results" step will fail because tests.json was already removed by the earlier step (line 94). It also duplicates the upload logic (you already upload test results via codecov/test-results-action). Please remove the duplicated block or keep only one upload mechanism.