Add direct AWS bootstrap and release tooling

[neebs12]

Summary

• create AWS resources directly with an idempotent AWS CLI bootstrap
• build, validate, activate, and retain Lambda MicroVM image versions
• configure generated repository variables with gh
• add CI, release artifacts, operations/security/install docs, and AWS runner target
• make Docker startup deterministic by managing containerd explicitly

Validation

• npm run check (53 Action tests, 16 supervisor tests)
• ShellCheck and bash syntax checks
• live AWS bootstrap in us-east-1
• AWS MicroVM image 3.0 passed ready/validate hooks with overlay2 and is ACTIVE