Find unused go.mod requirements

Find direct require directives in go.mod that no package in the module imports. A direct requirement is only justified by a direct import, so these are candidates go mod tidy would remove or demote to // indirect. They are reported rather than removed because deciding whether a module is still needed transitively requires the module graph, which is not available offline.