ci: bump goreleaser for Github Action from 1.4.1 to 1.16.2

[afdesk]

Description

Trivy uses old goreleaser v1.4.1, that was released on Jan 27, 2022.
There were a lot of fixes between 1.4.1 and 1.16.2.

Also there were deprecated several options:

• --rm-dist was deprecated in favor of --clean: https://goreleaser.com/deprecations#-rm-dist
• archives.replacements should not be used anymore: https://goreleaser.com/deprecations#archivesreplacements
• nfpms.replacements should not be used anymore: https://goreleaser.com/deprecations#nfpmsreplacements

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).