fix(go): support semicolon format for exhortignore in indirect deps

The JS client (PR #416) changed the ignore marker format for indirect
dependencies from "// indirect exhortignore" to "// indirect; exhortignore"
to prevent Go tooling from misclassifying indirect deps as direct.

Updated the regex in IgnoredLine() to accept both formats (with and
without semicolon). Updated test fixture to use the new format.

Fixes TC-4345

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: a-oren

src/main/java/io/github/guacsec/trustifyda/providers/GoModulesProvider.java

@@ -566,7 +566,8 @@ public boolean IgnoredLine(String line) {
       // comment ( e.g // indirect  //exhort)
       // then this line is to be checked if it's a comment after a package name.
       if (Pattern.matches(".+//\\s*(exhortignore|trustify-da-ignore)", line)
-          || Pattern.matches(".+//\\sindirect (//)?\\s*(exhortignore|trustify-da-ignore)", line)) {
+          || Pattern.matches(
+              ".+//\\s*indirect\\s*;?\\s*(//)?\\s*(exhortignore|trustify-da-ignore)", line)) {
         String trimmedRow = line.trim();
         // filter out lines where exhortignore or trustify-da-ignore has no meaning
         if (!trimmedRow.startsWith("module ")

src/test/resources/tst_manifests/golang/go_mod_with_ignore/go.mod

@@ -15,13 +15,13 @@ require (
 require (
         github.com/davecgh/go-spew v1.1.1 // indirect
         github.com/emicklei/go-restful/v3 v3.9.0 // indirect
-        github.com/go-logr/logr v1.2.3 // indirect trustify-da-ignore
+        github.com/go-logr/logr v1.2.3 // indirect; trustify-da-ignore
         github.com/go-openapi/jsonpointer v0.19.5 // indirect
         github.com/go-openapi/jsonreference v0.20.0 // indirect
         github.com/go-openapi/swag v0.19.14 // indirect
         github.com/gogo/protobuf v1.3.2 // indirect
         github.com/golang/protobuf v1.5.2 // indirect
-        github.com/google/gnostic v0.5.7-v3refs // indirect //trustify-da-ignore
+        github.com/google/gnostic v0.5.7-v3refs // indirect; //trustify-da-ignore
         github.com/google/go-cmp v0.5.9 // indirect
         github.com/google/gofuzz v1.1.0 // indirect
         github.com/imdario/mergo v0.3.6 // indirect