fix: add nolint:gosec for G703 path traversal in test cleanup

The temp file path comes from os.CreateTemp which is safe. The newer
CI linter (v2.10.1) flags this as G703 path traversal via taint analysis.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: chris-rock

controllers/k8s_scan/deployment_handler_test.go

@@ -748,7 +748,8 @@ func (s *DeploymentHandlerSuite) createDeploymentHandlerWithVaultMock(vaultFetch
 	_, err = tmpFile.WriteString("fake-sa-jwt-token")
 	s.Require().NoError(err)
 	s.Require().NoError(tmpFile.Close())
-	s.T().Cleanup(func() { _ = os.Remove(tmpFile.Name()) })
+	tmpName := tmpFile.Name()
+	s.T().Cleanup(func() { _ = os.Remove(tmpName) }) //nolint:gosec
 
 	return DeploymentHandler{
 		KubeClient:             s.fakeClientBuilder.Build(),