ci: pivot rust-hermetic leg to hosted runners + sibling deploy keys (m1bench retired) — loud-skip until secrets minted, sibling-SHA first-run observability

Co-authored-by: Alfonso <alfonso-magic-context@users.noreply.github.com>