Re-enable govulncheck as blocking CI step

[MacAttak]

Context

govulncheck panics on Go 1.25 type signatures when scanning dependencies that use go-json-experiment/json. This is a known upstream issue: golang/go#75584

We set continue-on-error: true on the Govulncheck CI step in .github/workflows/ci.yml as a workaround.

Action

Once the upstream fix is released (either in govulncheck or Go), remove continue-on-error: true from the Govulncheck step in .github/workflows/ci.yml.

How to verify

go install golang.org/x/vuln/cmd/govulncheck@latest
govulncheck ./...

If it completes without panicking, the fix is in and the workaround can be removed.

References

• Upstream issue: x/vuln: panic with: want variadic parameter of unnamed slice or string type golang/go#75584
• Workaround commit: 57636b3