move pkg indexing to separate function/endponit

[iggy]

Turns out, building the package index on every package upload is a little wasteful. Also update some go deps while we're here.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	4		0	0.05s
✅ COPYPASTE	jscpd	yes		no	1.9s
✅ DOCKERFILE	hadolint	1		0	0.17s
✅ GO	golangci-lint	yes	yes	no	40.91s
✅ GO	revive	yes		no	0.01s
✅ MARKDOWN	markdownlint	2	0	0	0.61s
✅ MARKDOWN	markdown-link-check	2		0	0.58s
✅ MARKDOWN	markdown-table-formatter	2	0	0	0.37s
✅ OPENAPI	spectral	2		0	4.64s
✅ REPOSITORY	checkov	yes		no	22.18s
✅ REPOSITORY	gitleaks	yes		no	1.2s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	26.12s
✅ REPOSITORY	secretlint	yes		no	1.47s
✅ REPOSITORY	trivy	yes		no	16.07s
✅ REPOSITORY	trivy-sbom	yes		no	3.2s
✅ REPOSITORY	trufflehog	yes		no	10.65s
⚠️ SPELL	lychee	12		3	0.3s
✅ YAML	prettier	10	0	0	1.3s
✅ YAML	v8r	10		0	10.09s
✅ YAML	yamllint	10		0	0.89s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by