Disable pip version check when upgrading certifi

[hugovk]

This PR adds --disable-pip-version-check to the pip invocation that upgrades certifi in Install Certificates.command, to avoid warnings like this:

[notice] A new release of pip is available: 25.3 -> 26.0.1
[notice] To update, run: /Library/Frameworks/Python.framework/Versions/3.14/bin/python3.14 -m pip install --upgrade pip

Docs: https://pip.pypa.io/en/stable/cli/pip/#cmdoption-disable-pip-version-check

These sometimes show up on GitHub Actions as part of actions/setup-python, which I as an end user has little control over. And the funny thing is, that action had just upgraded pip right before calling Install Certificates.command. See python-pillow/Pillow#9424 (comment) for more details.

I think avoiding the warning in this script is okay. In normal use, the user double clicks the "Install Certificates.command" icon during installation, the default terminal upgrades certifi then terminates.

People will still see the warning later on regular pip invocations when they're in a normal terminal session, which is when they can actually do something about it.

(Let me know if this PR needs an issue or news.)

[miss-islington-app]

Thanks @hugovk for the PR, and @ned-deily for merging it 🌮🎉.. I'm working now to backport this PR to: 3.13.
🐍🍒⛏🤖

[miss-islington-app]

Thanks @hugovk for the PR, and @ned-deily for merging it 🌮🎉.. I'm working now to backport this PR to: 3.14.
🐍🍒⛏🤖

[bedevere-app]

GH-144640 is a backport of this pull request to the 3.13 branch.

[bedevere-app]

GH-144641 is a backport of this pull request to the 3.14 branch.

[bedevere-bot]

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot AMD64 Debian root 3.x (tier-1) has failed when building commit 80ba4e1.

What do you need to do:

1. Don't panic.
2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
3. Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/345/builds/13374) and take a look at the build logs.
4. Check if the failure is related to this commit (80ba4e1) or if it is a false positive.
5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/345/builds/13374

Summary of the results of the build (if available):

==

Click to see traceback logs

Traceback (most recent call last):
  File "/root/buildarea/3.x.angelico-debian-amd64/build/Lib/test/support/__init__.py", line 947, in gc_collect
    gc.collect()
    ~~~~~~~~~~^^
ResourceWarning: unclosed file <_io.FileIO name=13 mode='wb' closefd=True>