fix: Add nolint comments for gosec/errcheck/unparam warnings

Fixes CI lint failures by adding appropriate nolint directives for:
- G204 (subprocess with variable) - git commands with trusted inputs
- G304 (file inclusion via variable) - paths from internal helpers
- G302/G306 (file permissions) - .gitignore needs 0644
- errcheck (unchecked return values) - fmt.Fprint* to stdout/stderr
- unparam (unused parameters) - reserved for future use

cmd/bd/edit.go

@@ -131,8 +131,7 @@ Examples:
 		_ = tmpFile.Close()
 
 		// Open the editor
-		// #nosec G204 -- editor comes from trusted $EDITOR/$VISUAL env or known defaults
-		editorCmd := exec.Command(editor, tmpPath)
+		editorCmd := exec.Command(editor, tmpPath) //nolint:gosec // G204: editor from trusted $EDITOR/$VISUAL env or known defaults
 		editorCmd.Stdin = os.Stdin
 		editorCmd.Stdout = os.Stdout
 		editorCmd.Stderr = os.Stderr