Next major (v3)

This is a list of things we're considering doing for the next major, though not everything listed will necessarily be done in this major:

- [ ] Remove deprecated flags
- [ ] `--sbom` (#2452)
- [ ] `--output`
- [ ] `--gh-annotations`
- [ ] Decide what experimental flags / actions to promote
- [ ] plugins (`--plugins`, `--disable-plugins`, `--no-default-plugins`
- [ ] http client
- [ ] deprecated packages (`--flag-deprecated-packages`)
- [ ] config updating (pending #2534)
- [ ] Remove interactive mode
- [ ] Remove deprecated GH workflows
- [ ] `osv-scanner-reusable-pr.yml`
- [ ] `osv-scanner-reusable.yml`
- [ ] Review names of public types and functions
- [ ] Rename `models.VulnerabilityFlattened`
- [ ] Rename `models.PackageVulns`
- [ ] Use or remove `ErrAPIFailed`
- [ ] Add context to `osvscanner.makeVulnRequestWithMatcher` (and maybe `osvscanner.Scan`?)
- [ ] Move `ScanResults.ScanParameters` field
- [ ] Change JSON output
- [ ] Disable unsafe plugins by default (https://github.com/google/osv-scanner/issues/2633)