ci: move compatible Linux jobs to rajesh-gb-1 - #7

Summary

Existing Linux jobs → selected-repository org runner group → disposable rajesh-gb-1 container

Move this repository's selected compatible Linux jobs to the owned runner pool. Preserve every existing check, trigger, permission, artifact and deployment condition. Chromium OS libraries are baked into the image, so browser download steps run without root.

Evidence

• Before: these jobs request GitHub-hosted Ubuntu compute.
• After: the organization pool is registered online with the exact requested labels. Each job gets a clean container as UID 1001, no host mounts or Docker socket, all Linux capabilities dropped, and 3 CPU / 8 GiB limits.
• YAML parsing, semantic comparison against the previous workflow, and git diff --check passed. Only selected Linux runner assignments changed; Windows, macOS, SDK-specific jobs and approval gates are unchanged.
• The image smoke test passed for nonroot identity, writable toolcache, Maven/Java 21 and Paramiko. Repository CI results will be recorded before handoff where PR triggers exist. Main-only deployment/index-update flows have not been triggered from this unmerged branch.

Merge Danger

Door: two-way

Revert runner labels to return to hosted compute. This PR does not merge itself or bypass deployment approvals.

Blast Radius: CI

The pool has two concurrent Linux slots for flarialmc and one for flarialconsulting, each capped independently. Jobs queue when those slots are busy. The group is restricted to explicitly selected repositories. GitHub artifact/cache storage remains separately metered.

Change-Id: chg_5d85b172d260553d0237ff78

Observed verification

• No migrated runner job has executed for this PR. Main-only, scheduled and release jobs were not started from an unmerged branch; runtime validation remains pending their reviewed trigger.

Traceability correction: the retained original runner-migration request is authoritative. Earlier unresolved dispatch-alias audit events remain preserved; this corrects the association without changing workflow behavior.