Go mod tidy
add an additional check to verify bitmask-core doesn't contain any unneeded dependencies.
Somewhat related to !14 (merged) which adds a gomobile build step to the CI, which expects a clean go.mod/go.sum to return to a clean state after the go bindings have been created