feat(go): port process access detectors

docs/SURICATA_ASSIMILATION.md

@@ -228,7 +228,8 @@ signature keeps `sid` / `signature` / `classtype` / tests / docs.
   equivalent, poll detectors ported, JSON output matching schemas. Runs
   alongside Python; harness compares both. *In progress:* the isolated
   `go-agent/` sidecar now has stdlib config loading, an injectable `/proc`
-  process view, the JSONL sweep loop, and fixture parity for `deleted_exe`;
+  process/file-descriptor view, the JSONL sweep loop, and fixture parity for
+  `ld_preload`, `deleted_exe`, `input_snooper`, and `credential_access`;
   Python remains the production agent.
 - **Phase 2 — eBPF via `cilium/ebpf`.** Port exec/syscall rules; drop the
   bcc/Python runtime dependency; single static binary.