feat: auto-fix license files on PRs and improve CI reliability

Changes:
- Pin go-licenses version in CI for reproducibility (commit 5348b744)
- Add GOROOT/PATH setup for 'Package does not have module info' fix
- Update license-check.yml to auto-fix and push to PR branches
- Add CI=true env var to use pinned go-licenses version
- Add dependabot exclusion from auto-fix workflow
- Remove unnecessary fetch-depth: 0 from checkout
- Fix comment body indentation in PR comment
- Add code-scanning exclusion for third-party files
- Simplify licenses-check to regenerate and compare

Author: SamMorrowDrums

.github/workflows/license-check.yml

@@ -19,16 +19,14 @@ permissions:
 jobs:
   license-check:
     runs-on: ubuntu-latest
-    # Don't run on forks (they can't push back) or dependabot (has its own token)
-    if: github.event.pull_request.head.repo.full_name == github.repository
+    # Don't run on forks (they can't push back) or dependabot
+    if: github.event.pull_request.head.repo.full_name == github.repository && github.actor != 'dependabot[bot]'
 
     steps:
       - name: Check out code
         uses: actions/checkout@v6
         with:
           ref: ${{ github.head_ref }}
-          # Need full history for push
-          fetch-depth: 0
 
       - name: Set up Go
         uses: actions/setup-go@v6
@@ -39,6 +37,8 @@ jobs:
       # which causes go-licenses to raise "Package ... does not have module info" errors.
       # For more information, https://github.com/google/go-licenses/issues/244#issuecomment-1885098633
       - name: Regenerate licenses
+        env:
+          CI: "true"
         run: |
           export GOROOT=$(go env GOROOT)
           export PATH=${GOROOT}/bin:$PATH
@@ -76,12 +76,12 @@ jobs:
               issue_number: context.issue.number,
               body: `## 📜 License files updated
 
-            I noticed the third-party license files were out of date and pushed a fix to this PR.
+I noticed the third-party license files were out of date and pushed a fix to this PR.
 
-            **What changed:** Dependencies were added, removed, or updated, which requires regenerating the license documentation.
+**What changed:** Dependencies were added, removed, or updated, which requires regenerating the license documentation.
 
-            **What I did:** Ran \`./script/licenses\` and committed the result.
+**What I did:** Ran \`./script/licenses\` and committed the result.
 
-            Please pull the latest changes before pushing again.`
+Please pull the latest changes before pushing again.`
             })