ci: enforce race and vulnerability checks

Author: kevinten10

.github/workflows/ci.yml

@@ -16,6 +16,7 @@ jobs:
         with:
           go-version: '1.26.5'
           cache-dependency-path: go.sum
-      - run: go test ./...
+      - run: go test -race ./...
       - run: go vet ./...
       - run: go build ./...
+      - run: go run golang.org/x/vuln/cmd/govulncheck@v1.6.0 ./...