Go modules and workspace hygiene: deliberate upgrades, MVS, sums, tools, audits, and reproducible dependency changes.