feat: support for vm runtime configurations for compute units and texera micro services

[dzueck]

What changes were proposed in this PR?

Adds support for running compute units and micro services inside a vm using kata containers. This is important for security as arbitrary code submitted by users can run inside these compute units. This PR adds the option to use VMs, but does not require it. It is only targeted at k8s deployments and was tested using RKE2. Note: k8s distributions like minikube may need additional steps to support VMs.

To enable VMs you must first install kata containers following these instructions. Make sure to follow the helm instructions. After this, you can enable Compute Units to use a VM by modifying these two lines in bin/k8s/values.yaml:

• name: KUBERNETES_COMPUTING_UNIT_RUNTIME_CLASS_CPU
  value: "kata-qemu-runtime-rs"
• name: KUBERNETES_COMPUTING_UNIT_RUNTIME_CLASS_GPU
  value: "kata-qemu-nvidia-gpu-runtime-rs"

To enable texera specific micro services to run in a VM modify this line:
global:
texeraMicroServiceRuntimeClass: "kata-qemu-runtime-rs"

Any related issues, documentation, discussions?

Closes #8545
Discussed in #8430

How was this PR tested?

Primarily tested in v1.2.0 where performance tests were done with various micro benchmark workflows which can be seen in #8430. Additional functionality testing still needs to be done on the latest commits.

Was this PR authored or co-authored using generative AI tooling?

Generated-by: Gemini 4.1 Pro

[github-actions]

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

• Contributors with relevant context: @aicam, @tanishqgandhi1908, @bobbai00
  You can notify them by mentioning @aicam, @tanishqgandhi1908, @bobbai00 in a comment.

[dzueck]

I have now tested it on the main branch and it works there too. Removing draft marking.