build: wire nvrc + nvidia-gpu base/addon into CI and packaging

Add the nvrc static-build target and make the NVIDIA rootfs targets
depend on it (the rootfs build consumes kata-static-nvrc.tar.zst), and
add the rootfs-image-nvidia-gpu-{base,addon} build targets to the
local-build Makefile and the nvgpu bundle.

Build nvrc and the base/addon rootfs images in the amd64/arm64 static
tarball workflows (nvrc is baked into the rootfs and pruned from the
release like the other guest components), and point the NVIDIA shim
components at the composable base + gpu addon (+ coco addon for the
confidential classes). The monolithic images are still built/shipped.

.github/workflows/build-kata-static-tarball-amd64.yaml

@@ -53,6 +53,7 @@ jobs:
           - kernel-debug
           - kernel-dragonball-experimental
           - kernel-nvidia-gpu
+          - nvrc
           - nydus
           - ovmf
           - ovmf-sev
@@ -211,6 +212,8 @@ jobs:
           - rootfs-image-mariner
           - rootfs-image-nvidia-gpu
           - rootfs-image-nvidia-gpu-confidential
+          - rootfs-image-nvidia-gpu-base
+          - rootfs-image-nvidia-gpu-addon
           - rootfs-initrd
           - rootfs-initrd-confidential
     concurrency:
@@ -282,6 +285,7 @@ jobs:
           - busybox
           - coco-guest-components
           - kernel-nvidia-gpu-modules
+          - nvrc
           - pause-image
     concurrency:
       group: ${{ github.workflow }}-${{ github.job }}-${{ github.event.pull_request.number || github.ref }}-amd64-${{ toJSON(matrix) }}

.github/workflows/build-kata-static-tarball-arm64.yaml

@@ -54,6 +54,7 @@ jobs:
           - kernel-dragonball-experimental
           - kernel-nvidia-gpu
           - kernel-cca-confidential
+          - nvrc
           - nydus
           - ovmf
           - pause-image
@@ -203,6 +204,8 @@ jobs:
           - rootfs-image
           - rootfs-image-coco-addon
           - rootfs-image-nvidia-gpu
+          - rootfs-image-nvidia-gpu-base
+          - rootfs-image-nvidia-gpu-addon
           - rootfs-initrd
     concurrency:
       group: ${{ github.workflow }}-${{ github.job }}-${{ github.event.pull_request.number || github.ref }}-arm-${{ toJSON(matrix) }}
@@ -272,6 +275,7 @@ jobs:
           - busybox
           - coco-guest-components
           - kernel-nvidia-gpu-modules
+          - nvrc
           - pause-image
     concurrency:
       group: ${{ github.workflow }}-${{ github.job }}-${{ github.event.pull_request.number || github.ref }}-arm-${{ toJSON(matrix) }}