ci: improve and modularize github actions workflows

[devin-ai-integration]

Improve and Modularize GitHub Actions Workflows

This PR improves the CI/CD pipeline by adding more robust build, test, and release processes.

Changes

• Add reusable workflow components for build and OSS upload
• Update Go version to 1.21
• Add matrix testing for Go 1.20 and 1.21
• Add security scanning with Gosec
• Add automated changelog generation
• Improve artifact handling with proper caching
• Split workflows into modular components

Testing

• CI workflow triggers correctly
• Matrix tests run for both Go versions
• Security scanning completes successfully
• Artifacts upload to Aliyun OSS
• Changelog generation works on release

Notes

• The workflows have been split into reusable components for better maintainability
• Added caching to improve build performance
• Security scanning helps catch potential vulnerabilities early

Link to Devin run: https://app.devin.ai/sessions/30bc8f191dcc428db360b825ea696a78

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR
• Look at CI failures and help fix them

⚙️ Control Options:

• Disable automatic comment and CI monitoring

Add "(aside)" to your comment to have me ignore it.

[devin-ai-integration]

Closing due to inactivity.