chore: Use latest expectations

• Drop pinning to outdated template
• Drops usage of gosec in favor of semgrep
• Updates fixture path to new path now that we are no longer using downstreams for go

Relates to gitlab-org/gitlab#385518 (closed)