Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance

drHEADer helps with the audit of security headers received in response to a single request or a list of requests.