add: alpine and go module scans

[dduzgun-security]

Description

Adding alpine and go mod scans on release and running hclfmt on the file.

Testing & Reproduction steps

Links

PR Checklist

• updated test coverage
• external facing docs updated
• appropriate backport labels added
• not a security concern

PCI review checklist

• I have documented a clear reason for, and description of, the change I am making.

• If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

• If applicable, I've documented the impact of any changes to security controls.

  Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

[dduzgun-security]

Seems like license/cla Expected — Waiting for status to be reported is hanging for a bit of time now, I think it's ok to merge since it's a PR done by me (employee at HashiCorp) and this doesn't change any licensing in the code