fix: upgrade go modules (fix secondary ratelimit)

[gal-legit]

What's being changed?

1. update go modules.
2. fix relevant code where the 3rd-party pkg broke compatibility (although we upgrade to the same major)

The purpose of this PR was to upgrade go-github-ratelimit to v1.0.3 to handle the x-ratelimit-reset header that GitHub started to use recently.

Trying to upgrade naively (go get -u) failed because a lot of indirect dependencies break compatibility. Instead, I used this snippet:
go get $(go list -f '{{if not (or .Main .Indirect)}}{{.Path}}{{end}}' -m all) to only upgrade the direct deps (and let them upgrade the indirect deps per need).
There are still 3 breaking changes that I had to handle, coming from out direct deps:

1. go-gpt3 was renamed to go-openai.
2. scorecard changed the function signature (name and a new param).
3. go-gitlab added a new param in one case.

Is this PR related to an existing issue?

no.

Check off the following:

• This PR follows the CONTRIBUTION.md guidelines
• I have self-reviewed my changes before submitting the PR