chore: migrate golangci-lint config to v2

golangci-lint v2 rejects the old config format, so the pre-commit hook failed on every commit. The config now uses version 2 with the same linters and exclusions.

.golangci.yml

@@ -1,19 +1,28 @@
-run:
+version: "2"
-  timeout: 5m
-
 linters:
   enable:
     - gosec
-    - staticcheck
+  settings:
-
+    gosec:
-linters-settings:
+      severity: medium
-  gosec:
+      confidence: low
-    excludes: []
+  exclusions:
-    confidence: low
+    generated: lax
-    severity: medium
+    presets:
-
+      - comments
-issues:
+      - common-false-positives
-  exclude-dirs:
+      - legacy
-    - .repos
+      - std-error-handling
-    - web
+    paths:
-  exclude-dirs-use-default: true
+      - .repos
+      - web
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$