Use dev-tools/go.mod for tool tracking

[michel-laterman]

What is the problem this PR solves?

Use go 1.24's tool directive for (most) development tools.

How does this PR solve the problem?

Use a go.mod file in the dev-tools dir to track tools used by fleet-server; golangci-lint is the single exception.
The golangci-lint version is now only specified in the .github/workflow/golangci-lint.yml file.

[mergify]

This pull request does not have a backport label. Could you fix it @michel-laterman? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

• backport-./d./d is the label to automatically backport to the 8./d branch. /d is the digit
• backport-active-all is the label that automatically backports to all active branches.
• backport-active-8 is the label that automatically backports to all active minor branches for the 8 major.
• backport-active-9 is the label that automatically backports to all active minor branches for the 9 major.

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[blakerouse]

Surprised to see that the top-level go.mod didn't have any changes. Shouldn't those dependencies be removed from that file? That would also result in a smaller NOTICE.txt which I also do not see here.

[pkoutsovasilis]

Surprised to see that the top-level go.mod didn't have any changes. Shouldn't those dependencies be removed from that file? That would also result in a smaller NOTICE.txt which I also do not see here.

To be honest initially I was expecting the same. Then taking a closer look I saw that @michel-laterman just moved the "tools" inside the dev-tools/go.mod and these weren't included to begin with in the main module go.mod. These were just installed through the Makefile but now they are automatically installed by the go toolchain, I like it I think. wdyt? 🙂

[michel-laterman]

The tools weren't a part of the top level go.mod file; i have another branch where I tried doing that, and it adds a bunch of dependencies and licenses

[blakerouse]

Thanks @michel-laterman and @pkoutsovasilis for the explanation.