Upgrade golangci-lint, trivy, kubectl, gh cli, sops, trivy (#2259) #2777

Job	Run time
env-protect-setup	6s
authorize	3s
get-dev-image / get-image	7s
code-coverage	26m 2s
generate-matrix	23m 44s
clang-tidy	23m 4s
build-and-test (Clang opt + UI, nokvm, --config=clang --compilation_mode=opt, bazel_buildables_cl...	23m 7s
build-and-test (BPF opt (6.1.106), kvm, --config=qemu-bpf --compilation_mode=opt --//bazel/test_r...	18m 11s
build-and-test (TSAN, nokvm, --config=tsan --compilation_mode=dbg, bazel_buildables_sanitizer, ba...	18m 49s
build-and-test (ASAN, nokvm, --config=asan --compilation_mode=dbg, bazel_buildables_sanitizer, ba...	19m 53s
build-and-test (BPF opt (4.14.254), kvm, --config=qemu-bpf --compilation_mode=opt --//bazel/test_...	18m 16s
build-and-test (Clang debug, nokvm, --config=clang --compilation_mode=dbg, bazel_buildables_clang...	18m 41s
build-and-test (Go race detector, nokvm, --config=go_race --compilation_mode=opt, bazel_buildable...	16m 24s
build-and-test (GCC opt, nokvm, --config=gcc --compilation_mode=opt, bazel_buildables_gcc_opt, ba...	18m 15s
build-and-test-status	3s
	3h 44m 45s

Provide feedback