fix(ci): govulncheck uses go.mod and use the correct notation from actions/setup-go

fix(ci): govulncheck uses go.mod and use the correct notation from actions/setup-go #9