chore: Refactored tooling for best practices

[stevehipwell]

This PR refactors the provider tooling to align it to GitHub Actions best practices and TF provider best practices. The following things have changed, but there shouldn't be a material change in how the project works.

• Fixed all GitHub Actions to a SHA with the version in a comment so Dependabot can keep them up to date but the runs are idempotent (to the checked in code)
• Added Dependabot group support to make GitHub Actions & Go module dependency changes easier to manage when they're not major versions
• Updated the setup Go GH action to use the Go version in go.mod instead of needing to copy the current version throughout the codebase.
• Added a terraform-registry-manifest.json file as per best practices
• Updated the golangci-lint config to the recommended pattern
• Commented out failing linting rules in .golangci.yml
• Updated the goreleaser config

[kfcampbell]

I appreciate the attention paid to the details here. I had a first pass of questions/comments.

[stevehipwell]

@kfcampbell I've replied to your questions.

[kfcampbell]

I had one final question, thank you for your patience here.

[kfcampbell]

Why not include major version updates here and below? Shouldn't the PR fire so we're aware the update exists even if we don't want to take it immediately?

[stevehipwell]

With this config major version updates will be managed in individual PRs while minor and patch updates will be grouped in a single PR per ecosystem.

[stevehipwell]

@kfcampbell I've rebased this ready to be merged.