Merge stable into develop

[infrahub-github-bot-app]

Merging stable into develop after merging pull request #9476.

---

Summary by cubic

Fixes branch‑scoped IPAM utilization and speeds up transform‑based computed attributes by chunking workflow submissions and capping related‑resource reads. Stabilizes E2E by replacing the Chromium patch with an LD_PRELOAD netlink shim and upgrading @playwright/test to 1.60; also enforces cardinality‑one adds in RelationshipAdd, skips redundant recomputes on repository re‑clone, adds least‑privilege deployment guidance (Neo4j/Redis/RabbitMQ/PostgreSQL), documents the observability stack (Helm/Compose), adds an SSO account‑name fallback deprecation guide, validates generated docs in CI, bumps CI github/gh-aw-actions to 0.78.3 and actions/labeler to 6.1.0, tunes Prefect testcontainers with a TRIGGERS read batch size, and updates CI to Node 24–compatible actions (pnpm/action-setup@v6, dorny/paths-filter@v4) with pnpm caching in the action.

• Bug Fixes

  • Utilization query picks the deepest active edge per hop and returns only active allocations.
  • PrefixUtilizationGetter is branch‑scoped and non‑mixing; utilization_branches is clamped to non‑negative.
  • GraphQL resolvers pass the current branch to IPPrefixUtilization and compare against the default branch correctly.
  • RelationshipAdd: reject multiple peers for cardinality‑one relationships; tests added; changelog updated.
  • Computed attributes: chunk transform workflow submissions and bound related‑resource reads via PREFECT_SERVER_EVENTS_MAXIMUM_RELATED_RESOURCES for better throughput.
  • Git integrator: skip CommitUpdatedEvent on storage‑recovery re‑clone to avoid a full redundant recompute.
  • Prefect testcontainers: set PREFECT_SERVER_SERVICES_TRIGGERS_READ_BATCH_SIZE (default 1) for the background service.
  • E2E: replace brittle Chromium binary patch with an LD_PRELOAD no_netlink.so shim (CI builds and injects via NO_NETLINK_SO); upgrade @playwright/test/playwright-core to 1.60; Playwright config scopes the preload to the browser process.
  • Tests cover inherited values on new branches and branch additions/deletions.

• Migration

  • PrefixUtilizationGetter now requires branch in the constructor and no longer accepts branch_names.
  • IPPrefixUtilization.init now requires branch=.... Update any custom callers accordingly.

^{Written for commit c3ac0b9. Summary will update on new commits.}