Check for latest patch level in Go vulnerability scan

[bestbeforetoday]

Avoids false positives from previous patch levels of the Go standard library after a new Go release.

Also use latest version of actions/setup-go.