fix(workspace): export golang.model to Jackson and fix glob matching

Add opens/exports for golang.model package in module-info.java so
Jackson can deserialize GoWorkspace. Also fix Java PathMatcher quirk
where **/X/** doesn't match root-level paths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Strum355

src/main/java/io/github/guacsec/trustifyda/utils/WorkspaceUtils.java

@@ -43,7 +43,17 @@ public static List<Path> filterByIgnorePatterns(
 
     List<PathMatcher> matchers =
         ignorePatterns.stream()
-            .map(p -> FileSystems.getDefault().getPathMatcher("glob:" + p))
+            .flatMap(
+                p -> {
+                  var fs = FileSystems.getDefault();
+                  java.util.stream.Stream.Builder<PathMatcher> b =
+                      java.util.stream.Stream.builder();
+                  b.add(fs.getPathMatcher("glob:" + p));
+                  if (p.startsWith("**/")) {
+                    b.add(fs.getPathMatcher("glob:" + p.substring(3)));
+                  }
+                  return b.build();
+                })
             .toList();
 
     return manifests.stream()

src/main/java/module-info.java

@@ -18,6 +18,8 @@
       com.fasterxml.jackson.databind;
   opens io.github.guacsec.trustifyda.providers.rust.model to
       com.fasterxml.jackson.databind;
+  opens io.github.guacsec.trustifyda.providers.golang.model to
+      com.fasterxml.jackson.databind;
 
   exports io.github.guacsec.trustifyda;
   exports io.github.guacsec.trustifyda.impl;
@@ -35,6 +37,7 @@
   exports io.github.guacsec.trustifyda.providers.javascript.model;
   exports io.github.guacsec.trustifyda.providers.javascript.workspace;
   exports io.github.guacsec.trustifyda.providers.rust.model;
+  exports io.github.guacsec.trustifyda.providers.golang.model;
   exports io.github.guacsec.trustifyda.logging;
   exports io.github.guacsec.trustifyda.image;
   exports io.github.guacsec.trustifyda.license;