ci: Build and test OpenVMM runtime-rs on AKS

Build the pinned OpenVMM binary from source and package it in the Kata
payload. Wire the openvmm-azure-runtime-rs shim into kata-deploy and
Helm.

Add OpenVMM to the shared amd64 asset matrix and run small and normal
cbl-mariner AKS jobs. Select runtime-rs paths in test helpers and skip
the known unsupported BlockModern emptyDir path.

Signed-off-by: Aurélien Bombo <abombo@microsoft.com>
Generated-By: GitHub Copilot

.github/workflows/build-kata-static-tarball-amd64.yaml

@@ -54,6 +54,7 @@ jobs:
           - kernel-dragonball-experimental
           - kernel-nvidia-gpu
           - nydus
+          - openvmm
           - ovmf
           - ovmf-sev
           - ovmf-tdx

.github/workflows/run-k8s-tests-on-aks.yaml

@@ -63,6 +63,12 @@ jobs:
           - host_os: cbl-mariner
             vmm: clh-azure-runtime-rs
             instance-type: normal
+          - host_os: cbl-mariner
+            vmm: openvmm-azure-runtime-rs
+            instance-type: small
+          - host_os: cbl-mariner
+            vmm: openvmm-azure-runtime-rs
+            instance-type: normal
     concurrency:
       group: ${{ github.workflow }}-${{ github.job }}-${{ github.event.pull_request.number || github.ref }}-run-k8s-tests-aks-${{ toJSON(matrix) }}
       cancel-in-progress: true