[8.8] [MOD-18346] Backport CI runner fixes and Debian Trixie

[GuyAv46]

Combined backport of #1032 and #1031 to 8.8. Both fixes are included so CI can validate and merge them together.

• Tag coverage and benchmark EC2 runners at launch with team=ai_and_search and a normalized GitHub actor as owner.
• Run ARM unit tests on GitHub-hosted ubuntu-22.04-arm and remove ARM EC2 provisioning and inherited secrets.
• Replace active Bullseye CI jobs with gcc:14-trixie, rename the Debian installer/workflow, and update workflow dependencies. Preserve release-specific AWS settings and test options.

Fixes MOD-18346.

Validation: parsed workflow YAML, checked local reusable-workflow paths and job dependencies, verified no active Bullseye jobs remain, compiled owner-tag Python, checked EC2 launch tags, and ran shell syntax/whitespace checks. Runtime CI is pending.

---

Note

Medium Risk
Changes the CI platform matrix (ARM runner type and Debian version) and AWS EC2 launch metadata, which can affect whether jobs pass or how cloud resources are attributed, but does not touch application runtime code.

Overview
Backports CI fixes for the 8.8 branch: EC2 runner tagging, ARM on GitHub-hosted runners, and Debian Trixie replacing Bullseye in the active matrix.

Coverage and benchmark EC2 flows now derive a sanitized owner tag from github.actor and pass aws-resource-tags (team=ai_and_search, owner=…) when starting runners via machulav/ec2-github-runner.

ARM unit tests no longer provision/stop dedicated EC2 runners or inherit AWS secrets; arm.yml delegates to task-unit-test.yml with env: ubuntu-22.04-arm.

Debian CI switches from Bullseye/debian11.yml to debian13.yml using the gcc:14-trixie container (workflow renamed to “debian trixie flow”). Merge-queue and nightly workflows call the new job (trixie) and drop secrets: inherit on the arm reusable workflow call.

^{Reviewed by Cursor Bugbot for commit 3c79bb5. Bugbot is set up for automated code reviews on this repo. Configure here.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.09%. Comparing base (45daaf3) to head (3c79bb5).

Additional details and impacted files

@@            Coverage Diff             @@
##              8.8    #1043      +/-   ##
==========================================
- Coverage   97.12%   97.09%   -0.03%     
==========================================
  Files         141      141              
  Lines        8164     8164              
==========================================
- Hits         7929     7927       -2     
- Misses        235      237       +2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.