Upstream Go explicitly disable CGO for `cmd/go` and `cmd/pprof`: https://github.com/golang/go/commit/da0c375c571037ec5ea6f8ef2be8f07593b40eb6#diff-030d514f8ef9ce94f204d0fd2bef7e32be77772cca7f2e3c41a1163b832946faR1287-R1291.

This causes the OCP payload checker to fail and will also mean that the Go binary will fall back to stdlib cryptography during builds when it must negotiate TLS connections for `go get`.

We should patch this out in our builds. This affects Go 1.21+.