build: upgrade to Go 1.23.0

[Wwwsylvia]

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #1492

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.54%. Comparing base (749d2ff) to head (ee54c02).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1493      +/-   ##
==========================================
- Coverage   85.59%   85.54%   -0.06%     
==========================================
  Files         113      113              
  Lines        3936     3936              
==========================================
- Hits         3369     3367       -2     
- Misses        340      342       +2     
  Partials      227      227              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[TerryHowe]

/lgtm

[TerryHowe]

Hold this for oras-go?

[shizhMSFT]

Hold this for oras-go?

Not necessary but good to do so.

[shizhMSFT]

LGTM

[Wwwsylvia]

oras-go is now at Go 1.22.