Add DCO and gofmt checking

This also adds `sudo: false` so we get the faster Docker-based workers. :+1: