security push

- addressing gosec issues
- adding workflow docs
- go version bump

.gitea/workflows/security.yaml

@@ -0,0 +1,8 @@
+name: "security scans"
+on: push
+
+jobs:
+  scans:
+    runs-on: smoke-test
+    steps:
+      uses: https://code.jakeyoungdev.com/actions/security@master #update this to a tag after first successful run