default ReadHeaderTimeout to ReadTimeout

- add gosec

flake.nix

@@ -47,6 +47,7 @@
               go
               gopls
               goreleaser
+              gosec
               go-tools
               nilaway
             ];

main.go

@@ -399,7 +399,8 @@ func main() {
 	}))
 
 	s := http.Server{
-		Handler: mux,
+		Handler:           mux,
+		ReadHeaderTimeout: 0,
 	}
 
 	lis, err := net.Listen("tcp", listen)