ci: gosec-sast needs upgrading
As noted in the failed job #3215460464 and in the issue SAST Deprecation: Analyzer consolidation and CI... (gitlab#352554 - closed), the gosec-sast
has been removed. We need to update the job and replace it with semgrep-sast
instead. See release-cli!149 (diffs) for an example.