chore: Enable Go jsonv2 experiment and update the trivy dependency (v0.67.2) (#3572)

It requires the encoding/json/jsontext
package which is only available when the goexperiment.jsonv2 build
tag is enabled. This was causing build constraint errors during
tests and builds.

Changes:
- Add GOEXPERIMENT=jsonv2 to Makefile export and all go build/test
  commands that use env (since env creates a fresh environment)
- Add GOEXPERIMENT=jsonv2 to GitHub workflows that use direct go
  commands (workflows using make inherit it from Makefile)

Fix other dependabot alerts.

Signed-off-by: Andrei Aaron <andreifdaaron@gmail.com>

.github/workflows/codeql-analysis.yml

@@ -39,6 +39,7 @@ jobs:
         # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
     env:
       CGO_ENABLED: 0
+      GOEXPERIMENT: jsonv2
       GOFLAGS: "-tags=sync,search,scrub,metrics,userprefs,mgmt,imagetrust"
 
     steps:

.github/workflows/golangci-lint.yaml

@@ -42,6 +42,8 @@ jobs:
 
           # Optional: if set to true then the action don't cache or restore ~/.cache/go-build.
           # skip-build-cache: true
+        env:
+          GOEXPERIMENT: jsonv2
       - name: Run linter from make target
         run: |
           make check