Migrate database containers to testcontainers-go with label-based identification, upgrade to Go 1.25, replace E2E tests with Go/termtest, and secure CI/CD pipeline #31