ci(deps): scope Go patent-license exception

[AetherAI3]

Outcome

Allows the Go project's patent-license metadata only for golang.org/x/net and golang.org/x/sys, which unblocks the pending Go dependency update without broadening the repository license allowlist.

Safety

• Package-URL scoped to exactly two Go modules.
• High/critical vulnerability review remains enabled.
• The modules remain BSD-3-Clause licensed; the extra scanner identifier represents Go's royalty-free patent grant.

Train position

Built from current main after #92. Merge this before rebuilding the Go dependency group.