Log warning if SIP is disabled and CLI version is < 2.15.1 (#2261)

* PR Checks: use `macos-12` runners for CLI v. < 2.15.1

Prior to CLI v2.15.1, MacOS ARM runners were not supported by the build tracer. "macos-latest" is now an ARM runner, so we run these tests on the old CLIs on Intel runners instead.

* Log a warning if SIP is disabled and CLI is < 2.15.1

* Add changenote for SIP-disabled support on old CLI versions

* Set up Python 3.11 for all MacOS checks

pr-checks/checks/go-custom-queries.yml

@@ -3,6 +3,9 @@ description: "Checks that Go works in conjunction with a config file specifying
 env:
   DOTNET_GENERATE_ASPNET_CERTIFICATE: "false"
 steps:
+  - uses: actions/setup-go@v5
+    with:
+      go-version: ">=1.21.0"
   - uses: ./../action/init
     with:
       languages: go

pr-checks/checks/multi-language-autodetect.yml

@@ -2,6 +2,10 @@ name: "Multi-language repository"
 description: "An end-to-end integration test of a multi-language repository using automatic language detection"
 operatingSystems: ["ubuntu", "macos"]
 steps:
+  - uses: actions/setup-go@v5
+    with:
+      go-version: ">=1.21.0"
+
   - uses: ./../action/init
     id: init
     with:

pr-checks/checks/scaling-reserved-ram.yml

@@ -4,6 +4,10 @@ operatingSystems: ["ubuntu", "macos"]
 env:
   CODEQL_ACTION_SCALING_RESERVED_RAM: true
 steps:
+  - uses: actions/setup-go@v5
+    with:
+      go-version: ">=1.21.0"
+
   - uses: ./../action/init
     id: init
     with: