[CI] use `govulncheck` to check for known vulnerabilities upon PR

[asimpleidea]

govulncheck is a new tool released by the go team that analyses the code for known vulnerabilities. I will check this and see if we can integrate it on our CI.

For reference: https://go.dev/blog/vuln