ci: rust-hermetic e2e leg for the release pipeline — m1bench self-hosted runner (tag/master-only, loud-skip until enabled); run_e2e_group extracted to scripts/run-rust-hermetic-e2e.sh as the single source of truth for local + CI

Co-authored-by: Alfonso <alfonso-magic-context@users.noreply.github.com>