chore: update CI, golangci-lint, and CLAUDE.md (#511)

* chore: update CI, golangci-lint, and CLAUDE.md
* fix: resolve CI failures on Windows test and lint
* fix: resolve Windows test path and main.go line length lint issues
* fix: auto-format log/ with gofumpt, exclude pre-refactoring lint issues
* fix: resolve remaining lint issues, remove unnecessary exclusions
* fix: remove invalid G117 gosec rule, use text exclusion for secret pattern
* fix: align CI golangci-lint version with local (v2.4 -> v2.10)

.github/workflows/test.yml

@@ -1,51 +1,43 @@
 name: Tests
 
 on:
-  pull_request:
   push:
     branches:
       - main
-      - dev
+  pull_request:
   workflow_dispatch:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   test:
+    name: Test (${{ matrix.os }})
     strategy:
       matrix:
-        go-version: [ "1.20.x" ]
-        platform: [ubuntu-latest]
-    runs-on: ${{ matrix.platform }}
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
     steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - name: Install Go
-        if: success()
-        uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
-          go-version: ${{ matrix.go-version }}
+          go-version-file: go.mod
 
       - name: Run tests
-        run: go test -v ./... -covermode=count
+        if: matrix.os == 'windows-latest'
+        run: go test -v ./...
 
-  coverage:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Install Go
-        if: success()
-        uses: actions/setup-go@v5
-        with:
-          go-version: "1.20.x"
-      - name: Checkout code
-        uses: actions/checkout@v4
-      - name: Calc coverage
-        run: |
-          go test -v ./... -covermode=count -coverprofile=coverage.out
+      - name: Run tests with coverage
+        if: matrix.os != 'windows-latest'
+        run: go test -v -coverprofile=coverage.out ./...
 
-      - name: Convert coverage.out to coverage.lcov
-        uses: jandelgado/gcov2lcov-action@v1
-      - name: Coveralls
-        uses: coverallsapp/github-action@v2
+      - name: Upload coverage
+        if: matrix.os == 'ubuntu-latest'
+        uses: codecov/codecov-action@v5
         with:
-          github-token: ${{ secrets.github_token }}
-          path-to-lcov: coverage.lcov
+          use_oidc: true
+          files: ./coverage.out
+          fail_ci_if_error: false
+          flags: unittests