Add go-vendor-tools to sandcastle image

go-vendor-tools is a new tool maintained by the Fedora Go SIG which
helps with generating vendor archives and helping vendored Go packages
follow the Licensing Guidelines. It is currently only available in
Fedora, so we install it with pip.

Author: gotmax23

files/install-rpm-packages.yaml

@@ -58,6 +58,9 @@
           - python3-hatch-vcs
           # for rust2rpm
           - python3.11-pip
+          # for go-vendor-tools
+          - trivy
+          - askalono-cli
         state: present
         install_weak_deps: False
       tags:
@@ -74,6 +77,11 @@
         executable: pip3.11
       tags:
         - basic-image
+    - name: Install go-vendor-tools that is not packaged for EL9.
+      ansible.builtin.pip:
+        name: go-vendor-tools
+      tags:
+        - basic-image
     - name: Install all RPM packages needed to hack on sandcastle.
       ansible.builtin.dnf:
         name: