ci: Be explicit about the version of linux and windows runner images

Using the -latest tag is potentially prone to errors, because an update of the tag
could break our CI. This recently happend with macos-latest, which we downgraded
to macos-12 earlier.

Using an explicit version reference makes this problem much less likely - in fact
renovate will pick up new versions once they exist and will suggest updates for it.
Thus, we will see the failures in a related PR instead of randomly everywhere.

.github/workflows/ci.yaml

@@ -46,7 +46,7 @@ jobs:
   arm:
     name: Build / Cabal - aarch64 GHC 9.4.8
     if: vars.SSH_ARM_ENABLED
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     outputs:
       remotepath: ${{ steps.Remote-Dir.outputs.remotepath }}
     env:
@@ -117,7 +117,7 @@ jobs:
     if: |
       startsWith(github.ref, 'refs/tags/v') &&
       (success() || needs.arm.result == 'skipped')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs:
       - docs
       - test
@@ -175,7 +175,7 @@ jobs:
     name: Release / GitHub
     permissions:
       contents: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs: prepare
     env:
       VERSION: ${{ needs.prepare.outputs.version }}
@@ -229,7 +229,7 @@ jobs:
 
   docker:
     name: Release / Docker Hub
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs:
       - prepare
     env:
@@ -282,7 +282,7 @@ jobs:
 
   docker-arm:
     name: Release / Docker Hub Arm
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs:
       - arm
       - prepare
@@ -316,7 +316,7 @@ jobs:
       - arm
       - docker-arm
     if: startsWith(github.ref, 'refs/tags/v')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     env:
       REMOTE_DIR: ${{ needs.arm.outputs.remotepath }}
     steps: