Can't ever trigger; the only functions that can legitimately be called
with ses=0 are tintin_*printf() for global-context messages.

Their 13.0 image is broken:
ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/lib/libuv.so.1 not found

Ubuntu's i386 has degraded into uselessness.

I don't know if Cirrus has native i386 images, the task here uses amd64
then adds multiarch i386 which is a waste of time, electricity, and
bandwidth, but their docs suck.  If someone has a clue, lemme know.

Not removing most now-redundant checks for now, as a major point of this
exercise is to test whether various static checkers are actually good for
something.

Mostly for own copypasta reasons :þ

The new version complains about old compat versions, ... lets us make both
happy.

Seems that their systemd is sabotaging the ability to run 32-bit binaries
(the hardware remains able to do so).

A dirty hack just good enough.

Codeql's code is of too low ql to handle native-arch binary helpers
during the build.

This reverts commit 6b90f0b3.
This reverts commit 7e2c8f63.

This uses host arch's compiler.

Alpine for now.

It'd be better to reverse the order of arguments, but that'd break compat,
thus let's at least benefit from the order.