Pin mvdan/gofumpt in github workflow ci and fix bash variable quoting

[javorszky]

Proposed changes

• pin gofumpt to current latest (v0.8.0) rather than "latest"
• quote variables in a bash script to prevent globbing and word splitting, see https://github.com/koalaman/shellcheck/wiki/SC2053

Checklist

Before creating a PR, run through this checklist and mark each as complete.

• I have read the CONTRIBUTING doc
• I have added tests that prove my fix is effective or that my feature works
• I have checked that all unit tests pass after adding my changes
• I have updated necessary documentation
• I have rebased my branch onto main
• I will ensure my PR is targeting the main branch and pulling from my branch from my own fork

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 52.80%. Comparing base (5f037b9) to head (94587f4).
Report is 2 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@ ## main #7923 +/- ## ========================================== - Coverage 52.82% 52.80% -0.02%  ========================================== Files 90 90 Lines 21671 21671 ========================================== - Hits 11447 11443 -4  - Misses 9747 9749 +2  - Partials 477 479 +2 

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.