chore: make build-ledger, fix reproducible builds, reinforce go version

[tbruyelle]

• add make build-ledger
• fix CI env set TM_VERSION
• reinforce go version to go1.21.13
  • build will exit if go version doesn't match exactly
  • print instruction to run with specific go version
  • add make print_required_go_version so CI can fetch the information

[tbruyelle]

we are enforcing even the subversion while technically that would not be needed if not for consistency of hashes for reproducible builds.

I am not against it, but it's a little tighter as a requirement than what we actually need.

True, but I have found this to be the easiest way to ensure reproducible builds for most users.

If we remove the subversion check, and just check the major version, how do we know about reproducible builds? We could print a warning, but that would be a 4 line warning with all the instructions, it looks a bit annoying to have that for every build, so I chose the current solution.

Let me know if you think of another way.

[tbruyelle]

@giunatale see d13bc86