Modify govulncheck to only check cwagent components and fix lint issues

[lisguo]

Description

Fix the PR build checks on this repo by running make fmt and modifying the govulncheck workflow to only look at components referenced in the cloudwatch agent repo.

Also modified PR template to run make fmt and verify checks

Testing

Tested as part of this PR check: https://github.com/amazon-contributing/opentelemetry-collector-contrib/actions/runs/15144600074/job/42577134176?pr=316

Looks at the following components:

./exporter/awscloudwatchlogsexporter
./exporter/awsemfexporter
./exporter/awsxrayexporter
./extension/awsmiddleware
./extension/awsproxy 
./internal/coreinternal 
./internal/k8sconfig 
./internal/kubelet 
./internal/metadataproviders
./override/aws 
./pkg/resourcetotelemetry
./pkg/stanza 
./processor/resourcedetectionprocessor 
./receiver/awscontainerinsightreceiver 
./receiver/awscontainerinsightskueuereceiver 
./receiver/awsxrayreceiver 
./receiver/jmxreceiver 
./receiver/prometheusreceiver

[dricross]

Should we fix the existing govulnchecks as part of this PR?

[lisguo]

Should we fix the existing govulnchecks as part of this PR?

Yeah I was thinking about it, but I believe we are already working on an otel bump which should resolve this.

[jefchien]

nit: Don't need the matrix if it's only one item.

[jefchien]

Guessing this is to ignore the comments with PR links.

[jefchien]

Can you have it print out the components it's checking?

[jefchien]

Seems like this will only work for packages that have only two levels (e.g. internal/coreutils) and not anything nested further. The list in the description is missing all the internal/aws/* packages and the pkg/translator/prometheus package.

[github-actions]

This PR was marked stale due to lack of activity. It will be closed in 14 days.