Migrate all CI workflows to databricks-protected-runner-group

Replace `ubuntu-latest` GitHub-hosted runners with the
`databricks-protected-runner-group` runner group across all workflow
jobs to improve CI security posture.

Co-authored-by: Isaac

Author: jprakash-db

.github/workflows/code-quality-checks.yml

@@ -13,7 +13,9 @@ permissions:
 
 jobs:
     check-linting:
-        runs-on: ubuntu-latest
+        runs-on:
+            group: databricks-protected-runner-group
+            labels: linux-ubuntu-latest
         strategy:
             matrix:
                 python-version: [3.9, "3.10", "3.11", "3.12"]
@@ -66,7 +68,9 @@ jobs:
               run: poetry run black --check src
 
     check-types:
-        runs-on: ubuntu-latest
+        runs-on:
+            group: databricks-protected-runner-group
+            labels: linux-ubuntu-latest
         strategy:
             matrix:
                 python-version: [3.9, "3.10", "3.11", "3.12"]

.github/workflows/dco-check.yml

@@ -8,7 +8,9 @@ permissions:
 
 jobs:
     check:
-        runs-on: ubuntu-latest
+        runs-on:
+            group: databricks-protected-runner-group
+            labels: linux-ubuntu-latest
         steps:
             - name: Check for DCO
               id: dco-check

.github/workflows/integration.yml

@@ -12,7 +12,9 @@ permissions:
 
 jobs:
     run-e2e-tests:
-        runs-on: ubuntu-latest
+        runs-on:
+            group: databricks-protected-runner-group
+            labels: linux-ubuntu-latest
         environment: azure-prod
         env:
             DATABRICKS_SERVER_HOSTNAME: ${{ secrets.DATABRICKS_HOST }}