15.14.1.166-x86

feat(wal-g): install wal-g 3.0.9 alongside v2 (INDATA-904) (#2266)

* feat(wal-g): install wal-g 3.0.8 alongside v2 (INDATA-904)

Adds a wal-g-3 nix package (v3.0.8) built and installed next to wal-g-2.
The /usr/local/bin/wal-g symlink stays on v2, so v3 is available as
wal-g-3 for backward-compat validation without changing the default.

wal-g 3.x imports encoding/json/v2 directly, so the build needs
GOEXPERIMENT=jsonv2 under Go 1.25 (threaded through walGCommon as a
per-package goExperiment knob; v2 unaffected).

* feat: wal-g v3 with latest patches for oriole compat

* fix: if orioledb alias wal-g v3 instead of v2

* test: xfail wal-g-3 apparmor check until the salt profile carries it

* test: disable boot-time salt in testinfra so CI validates the AMI's own config

* chore: bump release vars for wal-g v3 rc AMI build

* test: expose instance tags via IMDS so the salt opt-out tag is honoured

* Bump wal-g v3.0.9 and backpatch OrioleDBOndiskPageHeader parsing fix

* fix: handle go version

* test: drop the salt opt-out workaround; the salt profile now carries wal-g-3

* fix(wal-g): use proxyVendor so wal-g-3 vendorHash matches on Linux and macOS

* Update ansible/tasks/setup-wal-g.yml

Co-authored-by: Manuel Mendez <708570+mmlb@users.noreply.github.com>

* chore: drop rc suffix for release

---------

Co-authored-by: Sam Rose <samuel@supabase.io>
Co-authored-by: Artur Zakirov <zaartur@gmail.com>
Co-authored-by: Manuel Mendez <708570+mmlb@users.noreply.github.com>