Keep the build, test, security analysis, deployment and estate health workflows on Ubuntu 24.04 instead of allowing the latest runner label to move to a different image. Only runner labels change; existing steps and deployment behaviour are preserved.