[v16] improve error message when v16 tctl reads v17 tsh profile

[nklaassen]

# before
$ tctl status
ERROR: your credentials have expired, please login using `tsh login`

# after
$ go run ./tool/tctl status
ERROR: it appears tsh v17 or newer was used to log in, make sure to use tsh and tctl on the same major version
        no credentials: user TLS certificate was found at unsupported v17+ path (expected path: /Users/nic/.tsh/keys/one.private/nic-x509.pem, found path: /Users/nic/.tsh/keys/one.private/nic.crt)

exit status 1

This is almost a backport of #49305 but it inverts the comparison so that v16 tctl (versions after this merges) has a better error message when trying to read a profile created by tsh v17

[aws-amplify-us-west-2]

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-49306.d212ksyjt6y4yg.amplifyapp.com