chore: modernize setup-vind runtime and CI

[Piotr1215]

Summary

• move the action and generated bundles to Node.js 24
• update the GitHub Actions toolkit and other dependencies; npm audit now reports zero vulnerabilities
• guarantee cluster deletion even if log collection or artifact upload fails
• pin third-party workflow actions, disable checkout credential persistence, and harden the release workflow
• add real lint/typecheck gates and keep the three-version vind E2E matrix
• update the pinned vCluster CLI to v0.36.1 and refresh README/release/contributor guidance
• group future Renovate toolkit updates and keep workflow actions digest-pinned

Validation

• Node.js 24: npm ci
• npm run lint
• npm run typecheck
• npm test -- --runInBand (17 tests)
• npm run build
• npm audit --audit-level=low (0 vulnerabilities)
• actionlint .github/workflows/*.yml
• zizmor .github/workflows (no findings)
• CI run 30940006859: real vind clusters passed with latest, v0.36.1, and v0.32.2-rc.1; all three uploaded logs and deleted their cluster in the post step