Run most workflows on ubuntu-24.04

Github is currently rolling out ubuntu-latest as ubuntu-24.04

Manage that switch explicitly by running most jobs on 24.04

This keeps the release on 20.04 to ensure released binaries don't use a too-new
glibc for CGO.

.github/workflows/boulder-ci.yml

@@ -27,7 +27,7 @@ jobs:
   #  tags and 5 tests there would be 10 jobs run.
   b:
     # The type of runner that the job will run on
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
 
     strategy:
       # When set to true, GitHub cancels all in-progress jobs if any matrix job fails. Default: true
@@ -95,7 +95,7 @@ jobs:
         run: ${{ matrix.tests }}
 
   govulncheck:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
 
@@ -117,7 +117,7 @@ jobs:
         run: go run golang.org/x/vuln/cmd/govulncheck@latest ./...
 
   vendorcheck:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     strategy:
       # When set to true, GitHub cancels all in-progress jobs if any matrix job fails. Default: true
       fail-fast: false
@@ -153,7 +153,7 @@ jobs:
     permissions:
       contents: none
     if: ${{ always() }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     name: Boulder CI Test Matrix
     needs:
       - b

.github/workflows/codeql.yml

@@ -9,8 +9,8 @@ on:
 
 jobs:
   CodeQL-Build:
-    # CodeQL runs on ubuntu-latest, windows-latest, and macos-latest
-    runs-on: ubuntu-latest
+    # CodeQL supports the latest versions of ubuntu, windows, and macos
+    runs-on: ubuntu-24.04
 
     permissions:
       # required for all workflows

.github/workflows/cps-review.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   check-features:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: write
     steps:

.github/workflows/issue-for-sre-handoff.yml

@@ -13,7 +13,7 @@ on:
 
 jobs:
   check-changes:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       pull-requests: write
     steps: