doc: Add SAST note on private golang dependencies

What does this MR do and why?

This has come up a few times now so we should include a better note in our SAST docs around fetching private dependencies for gosec-sast scans

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.