ci: add Bazel RBE lane

[haasonsaas]

Summary

• add Bazel 9/Bzlmod/rules_python wiring for the Python package, app binary, and pytest suite
• add a repo-scoped Bazel RBE workflow gated by BAZEL_RBE_ENABLED and the evalops-agent-pm-rbe runner label
• make greenlet an explicit dependency so async SQLAlchemy tests install consistently under uv and Bazel

Test plan

• actionlint .github/workflows/ci.yml .github/workflows/bazel-rbe.yml
• uv sync --all-extras && OPENAI_API_KEY=test-key DRY_RUN=true uv run pytest -q
• make bazel-check
• make bazel-test

[cursor]

PR Summary

Medium Risk
Moderate risk because it introduces new Bazel/Bzlmod build+test wiring and a new GitHub Actions workflow that uses a self-hosted remote-execution runner; failures will primarily affect CI rather than runtime behavior.

Overview
Adds a Bazel-based build/test lane with Bazel 9 + Bzlmod + rules_python, including BUILD.bazel targets for the service library, app binary, and a Bazel-driven pytest target with a custom tests/pytest_main.py entrypoint to set up temp dirs and test env.

Introduces a gated GitHub Actions workflow (bazel-rbe.yml) that runs Bazel Remote Build Execution smoke tests on a labeled self-hosted runner, plus supporting tooling/config (.bazelrc remote config, .bazelignore, bazel/platforms, Makefile targets, and scripts/run-bazel-rbe.sh to manage the SSH/IAP tunnel).

Updates dependency management to include a generated requirements_lock.txt for Bazel’s pip parsing and makes greenlet explicit in pyproject.toml to stabilize async SQLAlchemy installs; also ignores Bazel output dirs in .gitignore.

^{Reviewed by Cursor Bugbot for commit e3daf89. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is ON, but it could not run because the branch was deleted or merged before autofix could start.}

^{Reviewed by Cursor Bugbot for commit e3daf89. Configure here.}

[cursor]

Missing pyproject.toml in Bazel test data attribute

High Severity

The py_test target's data attribute does not include pyproject.toml, but pytest_main.py passes -c str(repo_root / "pyproject.toml") to pytest.main. Under Bazel's sandboxed execution, only files in srcs or data are available in the runfiles tree. The missing file means pytest either errors out or runs without its config, losing the critical asyncio_mode = "auto" setting from [tool.pytest.ini_options], which would cause all async tests to fail.

Additional Locations (1)

• tests/pytest_main.py#L26-L27

 

^{Reviewed by Cursor Bugbot for commit e3daf89. Configure here.}