chore(ci): build golangci-lint from go.sum to align with project version

Replace golangci-lint-action (which downloads the latest release) with
go build from go.sum, so CI uses the same v1.64.7 as local `make lint`.
The binary is built with GOOS=linux GOARCH=amd64 for the host runner,
while job-level GOOS/GOARCH env vars direct golangci-lint's analysis to
the target platform.

Signed-off-by: Quang Nguyen <nguyenquang@microsoft.com>

Author: nddq

.github/workflows/golangci-lint.yaml

@@ -34,10 +34,7 @@ jobs:
       - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
         with:
           go-version-file: go.mod
+      - name: Build golangci-lint
+        run: GOOS=linux GOARCH=amd64 go build -o "$RUNNER_TEMP/golangci-lint" github.com/golangci/golangci-lint/cmd/golangci-lint
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
-        with:
-          version: latest
-          args: --concurrency 4 --verbose --config=.golangci.yaml --timeout=25m
-          only-new-issues: true
-          skip-cache: true
+        run: "$RUNNER_TEMP/golangci-lint" run --new-from-rev=${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before || 'HEAD~1' }} --concurrency 4 --verbose --config=.golangci.yaml --timeout=25m