test: AUT-1399 support non-root CI checkouts

[svcnemo-autobot]

Background

Export-Deploy launchers assumed /workspace, passwd-backed users, and root-writable runtime state, preventing its CI image from testing arbitrary checkouts under numeric non-root UIDs.

What changed

• derive coverage paths from the mounted checkout without Git metadata
• provide fallback identity and writable XDG/UV caches
• keep launchers rooted in the selected checkout
• install and validate the ONNX-specific Transformers API in a writable overlay
• cover /workdir, /tmp, no-Git, passwd-less, cache, and ONNX cases

Details

flowchart LR
  C[Selected commit] --> M[Non-root bind mount]
  M --> I[Existing CI image]
  I --> T[Checkout-relative launchers]
  T --> O[Writable checkout and caches]

Loading

The ONNX launcher resolves Transformers 4.51.3 outside the project, verifies HybridCache, and repairs incomplete cached overlays without rebuilding the CI image.

Tested

• launcher/coverage regression suite: 11 passed
• whole-tree Ruff and format checks
• exact secrets-detector hook and shell syntax
• non-root wheel build
• overlay repair and cache-hit probes
• prior L0 CPU/GPU, vLLM, and in-framework CI passed
• exact-head CI pending

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[svcnvidia-nemo-ci]

/ok to test ade0be3

[svcnvidia-nemo-ci]

/ok to test 092fe8c

[svcnvidia-nemo-ci]

/ok to test dbc0e3b

[svcnvidia-nemo-ci]

/ok to test 899d8b9

[svcnvidia-nemo-ci]

/ok to test 393ed07

[svcnvidia-nemo-ci]

/ok to test 47820b2