ci: pin ubuntu to 22.04 (#4213)

It seems that GitHub starts to point ubuntu-latest to ubuntu-24.04
(xref: actions/runner-images#10636), which
brings some breaking changes. For example, cuda 11.8 doesn't support the
default compiler in ubuntu-24.04.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

- **New Features**
- Updated build, test, and analysis workflows to run on Ubuntu 22.04,
enhancing compatibility and performance for C++ projects.
  
- **Bug Fixes**
- Corrected indentation in the permissions section of the CodeQL
workflow.

- **Chores**
- Adjusted timeout settings for the CodeQL analysis job based on the
programming language.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

.github/workflows/build_cc.yml

@@ -11,7 +11,7 @@ name: Build C++
 jobs:
   buildcc:
     name: Build C++
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
         include:

.github/workflows/codeql.yml

@@ -13,7 +13,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-latest' }}
+    runs-on: ${{ (matrix.language == 'swift' && 'macos-latest') || 'ubuntu-22.04' }}
     timeout-minutes: ${{ (matrix.language == 'swift' && 120) || 360 }}
     permissions:
       actions: read

.github/workflows/test_cc.yml

@@ -11,7 +11,7 @@ name: Test C++
 jobs:
   testcc:
     name: Test C++
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
         check_memleak: [true, false]