fix(ci): resolve goconst and gosec G704 lint failures

- Exclude test files from goconst/dupl linters (test string reuse is fine)
- Add #nosec G704 to httpClient.Do() calls (SDK intentionally makes HTTP
  requests to configured baseURL, not user-controlled SSRF)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Zie619

.golangci.yml

@@ -34,3 +34,8 @@ issues:
   exclude-use-default: false
   max-issues-per-linter: 0
   max-same-issues: 0
+  exclude-rules:
+    - path: _test\.go
+      linters:
+        - goconst
+        - dupl

examples/http-interceptor/main.go

@@ -62,7 +62,7 @@ func main() {
 		io.NopCloser(io.Reader(nil)))
 	req.Header.Set("Content-Type", "application/json")
 
-	resp, err = httpClient.Do(req)
+	resp, err = httpClient.Do(req) // #nosec G704 -- example code with hardcoded URL
 	if err != nil {
 		log.Printf("Request failed: %v", err)
 	} else {

trusera.go

@@ -146,7 +146,7 @@ func (c *Client) Flush() error {
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Authorization", "Bearer "+c.apiKey)
 
-	resp, err := c.httpClient.Do(req)
+	resp, err := c.httpClient.Do(req) // #nosec G704 -- URL constructed from configured baseURL
 	if err != nil {
 		return fmt.Errorf("failed to send events: %w", err)
 	}
@@ -183,7 +183,7 @@ func (c *Client) RegisterAgent(name, framework string) (string, error) {
 	req.Header.Set("Content-Type", "application/json")
 	req.Header.Set("Authorization", "Bearer "+c.apiKey)
 
-	resp, err := c.httpClient.Do(req)
+	resp, err := c.httpClient.Do(req) // #nosec G704 -- URL constructed from configured baseURL
 	if err != nil {
 		return "", fmt.Errorf("failed to register agent: %w", err)
 	}