Improving handling of included components

[zerok]

Right now the go.mod file mentions them with their exact version. Instead, we should probably move to either a workspace-based approach or use rewrites so that tools like renovate do not have to update these references.

See #341

[zerok]

renovatebot/renovate#23359 sounds like Renovate doesn't consider go.work files. We are already using replace statements in the relevant go.mod files so we could just ignore updates to those dependencies. Will try to update the config.