Allow users to disable via conf.d file.

and remove some stray -s -w (useless)

These aports have been found to have Go binaries that use archive/zip,
which was recently updated to fix CVE-2021-39293

The old replacement of github.com/kr/pty only replaced v1.1.1. But in
the latest version of gitlab-runner, v1.1.5 is being used, so it is not
replaced anymore.

Instead of replacing a specific version, replace all versions. And
instead of using a patch, use `go mod edit` to add the replace
decleration.

Go binaries are statically linked, security updates require rebuilds

see: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/27562

Internal version string has been changed.