Upgrade golangci-lint, trivy, kubectl, gh cli, sops, trivy #2776

Job	Run time
env-protect-setup	7s
authorize	4s
get-dev-image / get-image	6s
clang-tidy	5m 56s
generate-matrix	23m 22s
code-coverage	-1s
build-and-test (Clang opt + UI, nokvm, --config=clang --compilation_mode=opt, bazel_buildables_cl...	22m 43s
build-and-test (ASAN, nokvm, --config=asan --compilation_mode=dbg, bazel_buildables_sanitizer, ba...	19m 43s
build-and-test (Clang debug, nokvm, --config=clang --compilation_mode=dbg, bazel_buildables_clang...	18m 55s
build-and-test (TSAN, nokvm, --config=tsan --compilation_mode=dbg, bazel_buildables_sanitizer, ba...	19m 5s
build-and-test (Go race detector, nokvm, --config=go_race --compilation_mode=opt, bazel_buildable...	16m 35s
build-and-test (GCC opt, nokvm, --config=gcc --compilation_mode=opt, bazel_buildables_gcc_opt, ba...	18m 21s
build-and-test-status	4s
	2h 25m 0s

Provide feedback