Luigi security fixes : Update to alpine3.18 and go1.21 and fix Trivy vulns

[cruizen]

This is for better maintainability, not just security

• Also updates the docker images and GitHub workflow CI actions to use go 1.21 and Alpine 3.18 (smaller images)

Trivy scan on the branch :

[centos@test-pf9-du-host-airgap-c7-3146480-540 luigi]$ trivy fs . --scanners vuln
2024-02-22T21:51:28.051Z	INFO	Vulnerability scanning is enabled
2024-02-22T21:51:29.606Z	INFO	Number of language-specific files: 7
2024-02-22T21:51:29.606Z	INFO	Detecting gomod vulnerabilities...
[centos@test-pf9-du-host-airgap-c7-3146480-540 luigi]$

Fixes all 33 vulnerabilities reported by Grype scan in https://github.com/platform9/luigi/security/code-scanning

This was blocked on many previous attempts. Got a few things right this time.

Updating controller runtime results in updating k8s* modules. That was breaking the tests though since the tests used an obsolete ginkgo v1 reporter and an old k8s object (from envtest/printer) that has been removed / deprecated in new versions

Had to update test suites to import and use ginkgo/v2

[cruizen]

To generate coverage reports with codecov, codecov token needs to be populated as a repo secret in GitHub. This can be done once the admin approves codecov app.

info - 2024-02-22 22:34:23,202 -- ci service found: github-actions
warning - 2024-02-22 22:34:23,204 -- No config file could be found. Ignoring config.
Error: Codecov token not found. Please provide Codecov token with -t flag.
Warning: Codecov: Failed to properly create commit: The process '/home/runner/work/_actions/codecov/codecov-action/v4/dist/codecov' failed with exit code 1

[cruizen]

Do we need to bump versions of Luigi / Luigi addons with this change?

There is no change in functionality. However, the container images are now alpine based and the following can get a new version:
https://github.com/platform9/airctl/blob/atherton/conf/pmk_cluster_img_list.json#L61

[mithilarun]

We should bump up the version of Luigi. The underlying OS has changed, and a lot of the go module dependencies have been upgraded.

[cruizen]

Talked to @joey00072 about the branching. We are not using a 0.5 branch - will create a new 0.5.4 branch and push these updates there. (will require a new build of addon-operator and a new pf9-kube build with updated version of Luigi)