By default build with -buildmode=pie when available

[dprotaso]

I believe this would enable https://en.wikipedia.org/wiki/Address_space_layout_randomization and help our security posture

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Keep fresh with the 'lifecycle/frozen' label.

[imjasonh]

-buildmode=pie
Build the listed main packages and everything they import into
position independent executables (PIE). Packages not named
main are ignored.

from go help buildmode

[dprotaso]

@imjasonh is this done with your ref'd PR?

[imjasonh]

That PR was closed without merging. IIRC it wasn't clear to me how to check that it did anything.