enable notices generation from blackduck scan (when go dependencies change)

[dasormeter]

• Automatically runs blackduck scan when go dependencies change
• Generates notices file and commit it as part of the PR when dependencies change - call it NOTICES rather than NOTICE.txt
• Remove the schedule that ran on main previously

Pull request overview

This PR automates the generation and committing of a NOTICES file when Go dependencies change. The workflow now triggers on changes to go.mod/go.sum files, enables notices report generation in the Blackduck scan, and automatically commits the generated notices file back to the repository.

Key changes:

• Modified the Blackduck workflow trigger from branch-based to path-based (go.mod/go.sum)
• Enabled notices report generation in the Blackduck scan action
• Added automated commit workflow to push the generated NOTICES file

[githubuser-da]

The NOTICES file has been updated on this PR due to a change in
your library dependencies.

The workflow run ID is 20796011281.

[githubuser-da]

The NOTICES file has been updated on this PR due to a change in
your library dependencies.

The workflow run ID is 20796154206.

[githubuser-da]

The NOTICES file has been updated on this PR due to a change in
your library dependencies.

The workflow run ID is 20796221779.

[Copilot]

Pull request overview

Copilot reviewed 6 out of 7 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[githubuser-da]

The NOTICES file has been updated on this PR due to a change in
your library dependencies.

The workflow run ID is 20796634724.

[githubuser-da]

The NOTICES file has been updated on this PR due to a change in
your library dependencies.

The workflow run ID is 20796836778.