fix: Go tools — Add --version flag to all 7 binaries

[Delqhi]

Description

All 7 Go tools (discover, execute, map, grasp, scout, harvest, orchestrate) lack a --version flag. They print full usage on -version.

Current Behavior

$ discover --version
Usage: discover [flags]...
# Prints help instead of version

$ execute --version
Usage: execute [flags]...

Required Fix

Add --version flag to each tool's Cobra/flag setup that prints:

$ discover --version
discover v1.0.1-codocs (commit abc1234)

$ execute --version
execute v1.0.0-initial (commit def5678)

Implementation

In each tool's main.go:

1. Add version variable (set via -ldflags at build time)
2. Add --version flag that prints version and exits
3. Update CI build to inject version: go build -ldflags "-X main.version=v1.2.0-3-g4c5a78d" ...

Affected Repos

• SIN-Code-Discover-Tool
• SIN-Code-Execute-Tool
• SIN-Code-Map-Tool
• SIN-Code-Grasp-Tool
• SIN-Code-Scout-Tool
• SIN-Code-Harvest-Tool
• SIN-Code-Orchestrate-Tool

Acceptance Criteria

• All 7 tools respond to --version with semantic version + git commit
• sin update --check can detect version differences
• Version matches git tag

Priority

MEDIUM — Required for sin update to work properly; also basic CLI professionalism

[Delqhi]

Out of scope for the v3.0.0/v3.1.0/v3.2.0 train (no --version flag added). Remaining.

[Delqhi]

Status (2026-06-12, post-v3.5.0)

Priority: LOW — 1-line change per binary.

Affected binaries

sin-code has -v, --version already (cobra default via ldflags).
Missing on the 7 Go-tool repos that SIN-Code replaces:

1. SIN-Code-Container-Tool-Go
2. SIN-Code-SAST-Tool
3. SIN-Code-SBOM-Generator
4. SIN-Code-SBOM-Generator-Go
5. SIN-Code-SCA-Tool-Go
6. SIN-Code-Secrets-Scanner
7. (any other Go-binary in the org without --version)

Implementation

Each is a trivial cobra change in main.go:

rootCmd.Version = Version
rootCmd.SetVersionTemplate("sin-{tool} version {{.Version}}\n")

Plus the goreleaser ldflag -X main.Version={{.Version}} (already
done for SIN-Code main binary).

Cross-refs

• SIN-Code main has -v, --version working
• .goreleaser.yaml has the ldflag pattern documented
• PR per binary, can be done in one batch