fix(docker): harmonize non-root runtime contract (#3484)

* build(ci): harden repository test image

Signed-off-by: oliver könig <okoenig@nvidia.com>

* build(ci): give VLM wrapper a valid base

Signed-off-by: oliver könig <okoenig@nvidia.com>

* test(ci): stabilize Gemma4 draft shape check

Signed-off-by: oliver könig <okoenig@nvidia.com>

* test(ci): lock VLM dependency image inputs

Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(ci): preserve inherited VLM test packages

Signed-off-by: oliver könig <okoenig@nvidia.com>

* test(ci): validate evaluated Gemma4 draft logits

Signed-off-by: oliver könig <okoenig@nvidia.com>

* test(ci): isolate Gemma4 draft shape fixture

Signed-off-by: oliver könig <okoenig@nvidia.com>

* build(ci): make VLM validation overlay rootless

Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(docker): preserve root default with non-root support

Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(docker): harmonize non-root runtime contract

Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(docker): verify uv release artifacts

Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(docker): bound flash-attention build parallelism

Signed-off-by: oliver könig <okoenig@nvidia.com>

* ci(secrets): baseline pinned uv release checksums

The non-root Dockerfile pins the uv tarball by sha256, and detect-secrets
flags both per-arch digests as Hex High Entropy Strings. An inline
`pragma: allowlist secret` is not expressible there: Docker joins the RUN
continuation lines into one command, so a trailing `#` would comment out the
rest of the `case` block.

Record the two digests in the detect-secrets baseline instead.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Signed-off-by: oliver könig <okoenig@nvidia.com>

* fix(docker): trust the runtime-owned checkout for git

The full COPY hands /opt/Automodel to RUNTIME_UID while the image still runs
as root, so Git rejects the checkout for dubious ownership and exits 128.
Register the path as a system-wide safe.directory so both identities can read
the repository history.

Signed-off-by: oliver könig <okoenig@nvidia.com>

---------

Signed-off-by: oliver könig <okoenig@nvidia.com>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>