feat: bump GAF for reviewedBy and reviewedOn fields on the SARIF suppressions

[cbill-s]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages
  are release-note ready, emphasizing
  what was changed, not how.
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Bumps the GAF version to add reviewedOn, reviewedBy on the SARIF suppressions.

Where should the reviewer start?

• feat: add reviewedBy and reviewedOn to suppression details [IGNR-2204] go-application-framework#660
• feat: add review metadata to ufm sarif go-application-framework#677

How should this be manually tested?

1. To verify no regression issues, run a snyk code test --sarif and a snyk secrets test --sarif to verify everything works as expected
2. To see the new fields, you will need an ignore that has gone through review (using IAW).

What's the product update that needs to be communicated to CLI users?

reviewedOn, reviewedBy fields are now available on SARIF suppressions

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

📚 Repository Context Analyzed This review considered 5 relevant code sections from 3 files (average relevance: 0.94) scripts/upgrade-snyk-go-dependencies.go (lines 1-149) CLAUDE.md (2 segments, lines 229-315) package-lock.json (2 segments, lines 3404-3665)

🤖 Repository instructions applied (from AGENTS.md)