create a separate workflow for go analyze

[eljohnson92]

What type of PR is this?
/kind cleanup

What this PR does / why we need it:
This moves the code to do static code analysis into it's own workflow file. This also removes the security/vuln checks as the codeql settings on the repo should also cover that

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

TODOs:

• squashed commits
• includes documentation
• adds unit tests
• adds or updates e2e tests

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 54.42%. Comparing base (3ff0933) to head (9db3136).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #286   +/-   ##
=======================================
  Coverage   54.42%   54.42%           
=======================================
  Files          27       27           
  Lines        1560     1560           
=======================================
  Hits          849      849           
  Misses        663      663           
  Partials       48       48           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.