Fix Dependency Scanning: Add explicit job config and commit go.sum
- Add explicit dependency_scanning job override to ensure it runs
- Commit go.sum file (required for Go dependency scanning)
- Ensure job runs on MRs and all branches
- This should enable SCA vulnerability detection