CI: use sudo, assume docker present, use diff-{quality,cover}
Huh. I kinda just assumed we'd be root. Guess not!
All my attempts to just get a 'docker' binary installed seem to be failing on conflicts. Maybe it's already there in the GHA image? Let's try leaving it out.
Both linter tools report issues on the current master branch, which means they will always fail on exit. Using diff-quality gives us a check we can usefully fail on (as configured in this PR, it will only fail if the quality of the lines changed in the PR is less than 9.0).
Similarly we can use diff-cover to fail if coverage of the PR is under 90%.
This also uses a standard configuration file name for the pylint config (so we don't have to specify it with --rcfile), removes all non-default settings from the pylint config so it's clearer what we really intend to configure, and moves the flake8 config to a config file like pylint.
OK, this looks to be working. I can't manage to get it to give us diff-quality for the oz-* scripts, which is unfortunate, but it works for everything inside the oz module at least, which is an improvement.