fix(release): restore go.mod tidy state

[rianjs]

Closes #520

What went wrong

The release workflow failed in GoReleaser's Build (snapshot, no publish) step because its make tidy before-hook changed go.mod. internal/agents/agents.go directly imports github.com/gobwas/glob, but the dependency was still marked indirect.

Narrow fix

Move the existing github.com/gobwas/glob v0.2.3 requirement from the indirect block to the direct block. No dependency version, checksum, or application code changes.

Empirical verification

• Reproduced the CI failure locally: pre-fix make tidy produced exactly this one dependency reclassification and exited nonzero.
• Ran go mod tidy again and confirmed SHA-256 hashes of both go.mod and go.sum were unchanged before/after.
• After commit, make tidy passes against HEAD.
• make lint passes with zero issues.
• make test passes.
• make build passes.

After merge, the final acceptance criterion is a successful release workflow whose GoReleaser snapshot step gets past the tidy before-hook.