chore: improve maintenance automation

[dl-alexandre]

Summary:

• add grouped Dependabot coverage for Go modules and/or GitHub Actions
• normalize GitHub Actions Go setup to read go.mod where workflows use Go

Validation:

• parsed workflow and Dependabot YAML locally
• ran go test ./... across all Go modules from the parent workspace