Etapa G: fix buf/gosec/katana/naabu — instalaban un main helper (functional-test/gosecutil/protoc-gen-buf-lint); flags=./cmd/<tool>

recipes/buf.toml

@@ -13,7 +13,7 @@ commit = "4f657db175eb7418efef85b35db97472ff9df526"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
-flags    = []
+flags    = ["./cmd/buf"]  # varios mains en el repo; fijo el CLI real
 
 # buildInputs de nix (no usados con CGO off): go, git, protobuf
 [deps]

recipes/gosec.toml

@@ -13,7 +13,7 @@ commit = "9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
-flags    = []
+flags    = ["./cmd/gosec"]  # varios mains en el repo; fijo el CLI real
 
 # buildInputs de nix (no usados con CGO off): go
 [deps]

recipes/katana.toml

@@ -13,7 +13,7 @@ commit = "0265c675d03de83b1a1f1935ffb9c8ca9e4c17aa"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
-flags    = []
+flags    = ["./cmd/katana"]  # varios mains en el repo; fijo el CLI real
 
 # buildInputs de nix (no usados con CGO off): go
 [deps]

recipes/naabu.toml

@@ -13,7 +13,7 @@ commit = "5a0ca8bde91b5bb16213e9e8b5c6871eac954bd8"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
-flags    = []
+flags    = ["./cmd/naabu"]  # varios mains en el repo; fijo el CLI real
 
 # buildInputs de nix (no usados con CGO off): go, libpcap
 [deps]