Introduce `gosec` for Static Application Security Testing (SAST)

**What would you like to be added**:
Please, ensure that `gosec` is enabled, a new release is created, and deployed.
You can use this [PR](https://github.com/gardener/gardener/pull/9959) from g/g for reference.

**Why is this needed**:
Security & Compliance