make reposurgeon "go vet"-clean

Recent versions of the Go toolchain automatically invoke (a reduced form of) go vet as part of go test. If go vet fails, then the tests aren't run at all, which makes it difficult or impossible to write tests. This patch series adds a new Makefile target govet and fixes all reported problems in reposurgeon and repocutter.