chore(ci): add govulncheck, staticcheck, go vet, gofumpt gates

* Add lint/format checks to the Gitea release workflow and Makefile
  (targets: vet, fmt, fmt-check, staticcheck, govulncheck, check)
* Switch .golangci.json formatter from gofmt to gofumpt (extra.group-params)
* Bump golang.org/x/text 0.37.0 -> 0.39.0 for GO-2026-5970; re-vendor
* Fix staticcheck S1011 in pkg/diff; drop unused pgsql writer helpers
* Fix gocritic unnamedResult (pkg/diff) and rangeValCopy (pkg/pgsql)
* Apply gofumpt + goimports formatting across the tree

pkg/writers/template/formatters.go

@@ -57,7 +57,7 @@ func Indent(s string, spaces int) string {
 
 // IndentWith indents each line of a string with a custom prefix
 // Usage: {{ .Column.Description | indentWith "    " }}
-func IndentWith(s string, prefix string) string {
+func IndentWith(s, prefix string) string {
 	if s == "" {
 		return ""
 	}
@@ -93,7 +93,7 @@ func EscapeQuotes(s string) string {
 // Comment adds comment prefix to a string
 // Supports: "//" (Go, C++, etc.), "#" (Python, shell), "--" (SQL), "/* */" (block)
 // Usage: {{ .Table.Description | comment "//" }}
-func Comment(s string, style string) string {
+func Comment(s, style string) string {
 	if s == "" {
 		return ""
 	}

pkg/writers/template/safe_access.go

@@ -8,13 +8,13 @@ import (
 
 // Get safely gets a value from a map by key
 // Usage: {{ get .Metadata "key" }}
-func Get(m interface{}, key interface{}) interface{} {
+func Get(m, key interface{}) interface{} {
 	return reflectutil.MapGet(m, key)
 }
 
 // GetOr safely gets a value from a map with a default fallback
 // Usage: {{ getOr .Metadata "key" "default" }}
-func GetOr(m interface{}, key interface{}, defaultValue interface{}) interface{} {
+func GetOr(m, key, defaultValue interface{}) interface{} {
 	result := Get(m, key)
 	if result == nil {
 		return defaultValue
@@ -56,7 +56,7 @@ func SafeIndexOr(slice interface{}, index int, defaultValue interface{}) interfa
 
 // Has checks if a key exists in a map
 // Usage: {{ if has .Metadata "key" }}...{{ end }}
-func Has(m interface{}, key interface{}) bool {
+func Has(m, key interface{}) bool {
 	v := reflect.ValueOf(m)
 
 	// Dereference pointers
@@ -189,7 +189,7 @@ func Omit(m interface{}, keys ...interface{}) map[interface{}]interface{} {
 
 // SliceContains checks if a slice contains a value
 // Usage: {{ if sliceContains .Names "admin" }}...{{ end }}
-func SliceContains(slice interface{}, value interface{}) bool {
+func SliceContains(slice, value interface{}) bool {
 	v := reflect.ValueOf(slice)
 	v, ok := reflectutil.Deref(v)
 	if !ok {
@@ -211,7 +211,7 @@ func SliceContains(slice interface{}, value interface{}) bool {
 
 // IndexOf returns the index of a value in a slice, or -1 if not found
 // Usage: {{ $idx := indexOf .Names "admin" }}
-func IndexOf(slice interface{}, value interface{}) int {
+func IndexOf(slice, value interface{}) int {
 	v := reflect.ValueOf(slice)
 	v, ok := reflectutil.Deref(v)
 	if !ok {

pkg/writers/template/writer.go

@@ -285,7 +285,7 @@ func (w *Writer) generateFilename(data *TemplateData) (string, error) {
 }
 
 // writeOutput writes the output to a file or stdout
-func (w *Writer) writeOutput(content string, outputPath string) error {
+func (w *Writer) writeOutput(content, outputPath string) error {
 	// If output path is empty, write to stdout
 	if outputPath == "" {
 		fmt.Print(content)
@@ -295,13 +295,13 @@ func (w *Writer) writeOutput(content string, outputPath string) error {
 	// Ensure directory exists
 	dir := filepath.Dir(outputPath)
 	if dir != "." && dir != "" {
-		if err := os.MkdirAll(dir, 0755); err != nil {
+		if err := os.MkdirAll(dir, 0o755); err != nil {
 			return fmt.Errorf("failed to create directory %s: %w", dir, err)
 		}
 	}
 
 	// Write to file
-	if err := os.WriteFile(outputPath, []byte(content), 0644); err != nil {
+	if err := os.WriteFile(outputPath, []byte(content), 0o644); err != nil {
 		return fmt.Errorf("failed to write file %s: %w", outputPath, err)
 	}
 

pkg/writers/template/writer_test.go

@@ -17,10 +17,10 @@ func TestWriterTableIndexValuesDeterministic(t *testing.T) {
 	outputPath := filepath.Join(outputDir, "accounts.txt")
 	templateBody := "{{range values .Table.Indexes}}{{.Name}}:{{join .Columns \",\"}}\n{{end}}"
 
-	if err := os.MkdirAll(outputDir, 0755); err != nil {
+	if err := os.MkdirAll(outputDir, 0o755); err != nil {
 		t.Fatalf("create output dir: %v", err)
 	}
-	if err := os.WriteFile(templatePath, []byte(templateBody), 0644); err != nil {
+	if err := os.WriteFile(templatePath, []byte(templateBody), 0o644); err != nil {
 		t.Fatalf("write template: %v", err)
 	}