Introduce gosec for Static Application Security Testing (SAST)

[rishabh-11]

How to categorize this issue?

/area compliance /area security /kind enhancement /priority 1

What would you like to be added: use gosec for SAST. Check https://github.com/gardener/gardener/pull/9959 for reference.

• [x] mcm - https://github.com/gardener/machine-controller-manager/pull/954
• [ ] mcm-provider-aws
• [ ] mcm-provider-azure
• [ ] mcm-provider-gcp
• [ ] mcm-provider-openstack

Why is this needed: Please look at the mail from Claudia with the title Enable security linting in your repository by end of 2024 for details.