fix: Use force checkout on second checkout for PR scanning

[another-rex]

Fix a bug that occasionally happens when govulncheck modifies the go.work.sum file, making checkout step fail when checking out the merge branch.