Goose security updates (#3579)

Co-authored-by: Douwe Osinga <douwe@squareup.com>

crates/goose/tests/providers.rs

@@ -1,5 +1,5 @@
 use anyhow::Result;
-use dotenv::dotenv;
+use dotenvy::dotenv;
 use goose::message::{Message, MessageContent};
 use goose::providers::base::Provider;
 use goose::providers::errors::ProviderError;