feat(osutil): add SanitizePath for safe subprocess path handling

Add SanitizePath function and SanitizeOpts struct to clean and validate
file paths for safe use with exec.Command and similar functions.

Features:
- Expands ~ to user's home directory
- Cleans path to remove . and .. components
- Resolves to absolute path
- Optional validation for existence, file/directory type, and extensions

Co-Authored-By: Claude Opus 4.5 <[email protected]>

chore(ci): sast: update go versions

chore(deps): `go mod`: update dependencies

chore(deps): `go mod`: update dependencies

feat: `testing/coverbadge`: add `cmd/gocoverbadge`

enhance: `log/slogutil`: add `nil` check

chore(deps): `go mod`: update

chore(deps): `go mod`: update

feat: `sort/sortutil`: add `IntegerSuffix()`

chore(deps): `go mod`: update