feat(ci): migrate from Azure to AWS ephemeral runners

[ko3n1g]

Claude summary

Summary

• Migrates all runners from self-hosted-azure* to AWS runners selected by the FW-CI-templates pre-flight (NVIDIA members → DEFAULT_RUNNER_PREFIX, external contributors → NON_NVIDIA_RUNNER_PREFIX)
• Switches container registry from nemoci.azurecr.io (Azure ACR) to AWS ECR (DEFAULT_CONTAINER_REGISTRY / NON_NVIDIA_CONTAINER_REGISTRY), both configured as repo vars and routed via pre-flight.outputs.registry
• Replaces the bespoke is-not-external-contributor job and local check-nvidia-sso-membership action with the shared NVIDIA-NeMo/FW-CI-templates/_cicd_preflight.yml@v0.89.0 reusable workflow — same pattern as Megatron-Bridge
• Renames the old NeMo-specific pre-flight → configure (outputs test_to_run, components_to_run, PR label flags); configure runs after pre-flight to preserve ordering
• Rebuilds _build_container.yml as an inline docker/build-push-action job (removes FW-CI-templates delegation) so ECR auth works on AWS runners; registry is now forwarded from pre-flight.outputs.registry
• Propagates built image URLs through workflow outputs so all downstream jobs reference the correct ECR image tag (format: nemo-speech:<image-name>-<run_id>)
• Updates test-template action to accept a full image URL instead of constructing nemoci.azurecr.io/<name>:<run_id> internally
• Switches cicd-main.yml from pull_request: types: [labeled] to push: branches: pull-request/[0-9]+ (copy-pr-bot pattern, onboarded in ci: onboard copy-pr-bot #15631); derives PR author from branch name; removes cicd-relabel-bot.yml and label-based pre-flight logic

Job graph

pre-flight  (FW-CI-templates: SSO → runner_prefix, registry)
configure   (NeMo-specific: test_to_run, components_to_run, labels)
  └── code-linting
  └── cicd-wait-in-queue
       └── cicd-test-container-build  (runner + registry from pre-flight)
            ├── cicd-import-tests
            ├── L0_Setup_Test_Data_And_Models
            ├── cicd-main-unit-tests
            └── cicd-main-speech
                 └── Nemo_CICD_Test
                      └── Coverage

Repo vars required

Var	Internal	External
DEFAULT_RUNNER_PREFIX	nemo-ci-aws-gpu-x2	—
NON_NVIDIA_RUNNER_PREFIX	—	nemo-ci-aws-gpu-x2-ephemeral
DEFAULT_CONTAINER_REGISTRY	766267172432.dkr.ecr.us-east-1.amazonaws.com	—
NON_NVIDIA_CONTAINER_REGISTRY	—	(ephemeral ECR or public)
SSO_USERS_FILENAME	users_sso.json	—

Test plan

• Verify pre-flight (FW-CI-templates) passes for internal contributor PRs and selects the correct runner prefix
• Verify configure emits correct test_to_run / components_to_run outputs
• Verify cicd-test-container-build builds and pushes to ECR successfully
• Verify cicd-import-tests pulls the correct ECR image
• Verify unit tests in cicd-main-unit-tests run with the ECR image
• Verify speech tests in cicd-main-speech build and run the speech ECR image
• Verify CI triggers on push to pull-request/* branch (not on label)
• Verify external contributor PR is routed to ephemeral runner

[ko3n1g]

/ok to test

[github-actions]

[🤖]: Hi @ko3n1g 👋,

We wanted to let you know that a CICD pipeline for this PR just finished successfully.

So it might be time to merge this PR or get some approvals.

[ko3n1g]

/ok to test

[chtruong814]

Maybe need to rsync whatever they think HF HOME needs to be ?

[github-actions]

[🤖]: Hi @ko3n1g 👋,

We wanted to let you know that a CICD pipeline for this PR just finished successfully.

So it might be time to merge this PR or get some approvals.

[github-actions]

[🤖]: Hi @ko3n1g 👋,

We wanted to let you know that a CICD pipeline for this PR just finished successfully.

So it might be time to merge this PR or get some approvals.

[github-actions]

[🤖]: Hi @ko3n1g 👋,

We wanted to let you know that a CICD pipeline for this PR just finished successfully.

So it might be time to merge this PR or get some approvals.

[chtruong814]

thanks a lot for doing this. please hold off on merging until you give the Speech team a heads up and give them a chance to communicate within their team new way to kick off CI.