fix: pin golangci-lint v2 by commit SHA, remove unused nolint directives

- Fix golangci-lint import path to v2/cmd/golangci-lint
- Pin to v2.8.0 commit SHA (e2e40021c9007020676c93680a36e3ab06c6cd33)
- Use CGO_ENABLED=0 for golangci-lint install
- Remove unused //nolint:gosec directives flagged by nolintlint

cmd/chat-cli/api/client.go

@@ -123,7 +123,7 @@ func (c *Client) PollMessages(
 
 	req.Header.Set("Authorization", "Bearer "+c.Token)
 
-	resp, err := client.Do(req) //nolint:gosec // URL from user config
+	resp, err := client.Do(req)
 	if err != nil {
 		return nil, err
 	}
@@ -269,7 +269,7 @@ func (c *Client) do(
 		req.Header.Set("Authorization", "Bearer "+c.Token)
 	}
 
-	resp, err := c.HTTPClient.Do(req) //nolint:gosec // URL from user config
+	resp, err := c.HTTPClient.Do(req)
 	if err != nil {
 		return nil, fmt.Errorf("http: %w", err)
 	}