feat(image): add architecture-matched full runtime image

[jiangxt2]

Description

This PR adds a reproducible, full Tributo runtime image for Ray workloads.

The image packaging path:

• Builds for the native host architecture by default, with explicit linux/amd64 and linux/arm64 overrides.
• Packages the locked Tributo runtime extras, including Alpha-module dependencies, into one digest-pinned image.
• Includes the v1.0 daft-clickhouse, daft-doris, and ray-doris connector distributions with their driver closures.
• Adds manifest/profile generation, distribution and import gates, proxy/source isolation, and fail-closed build validation.
• Validates the image through a Docker Ray cluster and Ray Jobs API worker gate.
• Documents image building, runtime usage, connector installation, and explicit Daft/Ray routing.

The image contains Alpha dependencies as installable runtime components; this does not change the stability level of those Alpha capabilities.

Related issues

None.

Additional information

• User-facing impact: users can build a single full runtime image and use the generated image profile with existing Ray Jobs and algorithm preflight contracts.
• Validation:
  • uv lock --check passed.
  • Final non-integration test selection: 3322 passed, 20 skipped, 386 deselected.
  • Ruff, formatting, documentation reference tests, Sphinx strict build, spelling, and git diff --check passed.
  • Native Apple Silicon linux/arm64 image build and Docker Ray Jobs gate passed, including worker architecture, Python/Ray/Tributo versions, connector imports and versions, and a minimal Ray Data execution.
• Integration boundary: the image gate validates dependency closure, imports, Ray workers and Ray Data. Real ClickHouse/Doris service E2E remains a separate infrastructure gate and is not claimed here.
• Platform limitation: native linux/amd64 runtime validation was not claimed on the ARM64 host. Docker Desktop macOS ARM QEMU reproduces a pyarrow segmentation fault in the Ray base-image path.