fix: resolve remaining golangci-lint 2.10.1 taint-analysis findings
Suppress false-positive gosec G703 (path traversal) and G704 (SSRF)
findings from stricter taint analysis in golangci-lint 2.10.1.
Also exclude modernize/newexpr check globally — it incorrectly suggests
replacing ptr(true) with new(bool), but new(T) only produces zero-value
pointers.
