fix: Revert "chore: Update go-sarif to v3 from v2 (#1985)"

[another-rex]

This reverts commit 24e8319.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 72.72727% with 3 lines in your changes missing coverage. Please review.

Project coverage is 66.12%. Comparing base (9267fda) to head (5172cc2).

Files with missing lines	Patch %	Lines
internal/output/sarif.go	72.72%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2059      +/-   ##
==========================================
- Coverage   66.13%   66.12%   -0.02%     
==========================================
  Files         172      172              
  Lines       16276    16279       +3     
==========================================
  Hits        10764    10764              
- Misses       4857     4859       +2     
- Partials      655      656       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[cuixq]

Is this ready for review?

[another-rex]

Superseded by #2064