Bump GitHub Actions versions and use Go 1.22 and 1.21

Use latest macOS and Windows versions instead of referring to an outdated version that might be removed later. See the table at https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners/about-github-hosted-runners#standard-github-hosted-runners-for-public-repositories
Use the stable and oldstable aliases instead of hard-coding specific point releases for actions/setup-go. The arm64 builder is using a Docker image, so use the 1.22 image tag. We can use the latest tag in the future to avoid having to update the version.
Bump github/codeql-action actions to v3 as v2 is deprecated: https://github.com/github/codeql-action?tab=readme-ov-file#supported-versions-of-the-codeql-action
Bump Go version in go.mod to the minimum Go version supported by Go.
Bump golangci-lint for Go 1.22 and fix some linting errors.

The following SA1019 errors were ignored and need to be fixed later:

(3x) SA1019: elliptic.Marshal has been deprecated since Go 1.21:
    for ECDH, use the crypto/ecdh package.
    This function returns an encoding equivalent to that of PublicKey.Bytes in crypto/ecdh.  (staticcheck)

(2x) SA1019: elliptic.GenerateKey has been deprecated since Go 1.21:
    for ECDH, use the GenerateKey methods of the [crypto/ecdh] package;
    for ECDSA, use the GenerateKey function of the crypto/ecdsa package.  (staticcheck)

(3x) SA1019: elliptic.Unmarshal has been deprecated since Go 1.21:
    for ECDH, use the crypto/ecdh package.
    This function accepts an encoding equivalent to that of the NewPublicKey methods in crypto/ecdh.  (staticcheck)

(1x) SA1019: params.ScalarBaseMult has been deprecated since Go 1.21:
    the [CurveParams] methods are deprecated and are not guaranteed to provide any security property.
    For ECDH, use the [crypto/ecdh] package.
    For ECDSA, use the [crypto/ecdsa] package with a [Curve] value returned directly from [P224], [P256], [P384], or [P521].  (staticcheck)

cloudflare / circl

Bump GitHub Actions versions and use Go 1.22 and 1.21 #477