P0: Update Go version matrix from [1.21.x, 1.22.x] to [1.23.x] to match go.mod (go 1.23.0) P0: Update security-scan Go version from 1.21.x to 1.23.x P1: Replace grep -oP with portable awk for coverage threshold calculation Co-Authored-By: Paperclip <noreply@paperclip.ing>