fix(backend): add go-pkg backend for go package installation and include pip-audit/govulncheck

Author: snowdream

.unirtm.toml

@@ -155,6 +155,8 @@ node = '26.1.0'
 'npm:sort-package-json' = '3.6.1'
 'npm:stylelint' = '17.10.0'
 'pipx:clang-format' = '22.1.4'
+'pipx:pip-audit' = '2.8.0'
 'pipx:pre-commit' = '4.6.0'
 'pipx:yamllint' = '1.38.0'
 python = '3.14.4'
+'go:golang.org/x/vuln/cmd/govulncheck' = '1.1.4'

internal/backend/go_pkg.go

@@ -0,0 +1,20 @@
+// Copyright (c) 2026 SnowdreamTech. All rights reserved.
+// Licensed under the MIT License. See LICENSE file in the project root for full license information.
+
+package backend
+
+// GoPkgBackend implements the backend for go packages.
+// It embeds GoBackend to reuse its version resolution logic (proxy.golang.org).
+type GoPkgBackend struct {
+	*GoBackend
+}
+
+func NewGoPkgBackend() *GoPkgBackend {
+	return &GoPkgBackend{
+		GoBackend: NewGoBackend(),
+	}
+}
+
+func (b *GoPkgBackend) Name() string {
+	return "go-pkg"
+}

internal/backend/registry.go

@@ -46,6 +46,7 @@ func NewRegistry() *Registry {
 	r.Register(NewS3Backend())
 	r.Register(NewPipxBackend())
 	r.Register(NewNativeBackend())
+	r.Register(NewGoPkgBackend())
 
 	return r
 }