ci: macos: run arm64 on cirrus m2 runner

- add rust toolchain setup
- /usr/local/bin isn't writable by default, use sudo

.github/workflows/build.yml

@@ -723,7 +723,7 @@ jobs:
           - id: macos-12
             label: "12/x86_64"
             arch_triplet: x64-osx
-          - id: macos-13-xlarge
+          - id: "ghcr.io/cirruslabs/macos-ventura-xcode:15"
             label: "13/arm64"
             arch_triplet: arm64-osx
     runs-on: ${{ matrix.os.id }}
@@ -781,6 +781,9 @@ jobs:
         with:
           go-version: '^1.21.1'
 
+      - name: "setup: rust"
+        uses: dtolnay/rust-toolchain@stable
+
       - name: "setup: homebrew cache"
         id: cache-brew
         uses: actions/cache@v3
@@ -883,7 +886,7 @@ jobs:
           cd apfs-clone-checker
           gcc clone_checker.c -o clone_checker
           chmod +x clone_checker
-          mv clone_checker /usr/local/bin/
+          sudo mv clone_checker /usr/local/bin/
 
       - name: "test: unit tests"
         uses: lukka/run-cmake@v10