chore: update golangci-lint to v2.13.0

Migrate the deprecated gofumpt `extra-rules` to `extra.group-params`, as
the alias now also enables the new `clothe-returns` and `balance-calls`
rules. Disable SA4023, which hangs on go 1.27, see
https://github.com/golangci/golangci-lint/issues/6732.

Apply the resulting modernize fixes, mostly flattening embedded struct
literals and switching errors.As to errors.AsType.

Assisted-by: Claude:Opus 5

routers/api/packages/container/container.go

@@ -294,10 +294,8 @@ func PostBlobsUploads(ctx *context.Context) {
 		if _, err := saveAsPackageBlob(ctx,
 			buf,
 			&packages_service.PackageCreationInfo{
-				PackageInfo: packages_service.PackageInfo{
-					Owner: ctx.Package.Owner,
-					Name:  image,
-				},
+				Owner:   ctx.Package.Owner,
+				Name:    image,
 				Creator: ctx.Doer,
 			},
 		); err != nil {
@@ -443,10 +441,8 @@ func PutBlobsUpload(ctx *context.Context) {
 	if _, err := saveAsPackageBlob(ctx,
 		uploader,
 		&packages_service.PackageCreationInfo{
-			PackageInfo: packages_service.PackageInfo{
-				Owner: ctx.Package.Owner,
-				Name:  image,
-			},
+			Owner:   ctx.Package.Owner,
+			Name:    image,
 			Creator: ctx.Doer,
 		},
 	); err != nil {
@@ -598,8 +594,7 @@ func PutManifest(ctx *context.Context) {
 
 	digest, err := processManifest(ctx, mci, buf)
 	if err != nil {
-		var namedError *namedError
-		if errors.As(err, &namedError) {
+		if namedError, ok := errors.AsType[*namedError](err); ok {
 			apiErrorDefined(ctx, namedError)
 		} else if errors.Is(err, container_model.ErrContainerBlobNotExist) {
 			apiErrorDefined(ctx, errBlobUnknown)