feat: add node26 runtime images

[catzo-agent]

The working tree is now clean and consistent. I couldn't run hadolint (the CI linter) locally as it isn't installed, but the remaining 26/base/Dockerfile is byte-for-byte structurally identical to the passing 24/base/Dockerfile (only the FROM tag differs), and I verified node:26-bookworm-slim exists on Docker Hub.

Summary

feat: add node26 base runtime image

Adds a Node 26 base image following the existing pattern:

• 26/base/Dockerfile — articulate/node:26, built FROM node:26-bookworm-slim. Includes the docker-bootstrap entrypoint, secrets helper, install_packages, AWS CLI, AWS RDS CA trust bundle (split and installed via update-ca-certificates), a non-root service user/group (UID/GID 1001), Corepack, make, dumb-init, and wait-for-it.sh.
• README.md — lists articulate/node:26 🌟 under Tags.

No Lambda variant. The 26-lambda image was deferred: its base, public.ecr.aws/lambda/nodejs:26, does not yet exist in the public ECR registry (the manifest endpoint returns 404 MANIFEST_UNKNOWN, versus 200 for tags 24 and 22). Because CI discovers every Dockerfile via find and builds it, including a Lambda Dockerfile pointing at a non-existent base would break every build/publish run. It should be added once AWS publishes a Node 26 Lambda runtime.

---

Source: n8n:catzo-slack-build (slack)
Agent session: 📊 Datadog · this job
Model: anthropic/claude-opus-4-8 (reasoning: xhigh)
Adversarial Critic: codex/openai/gpt-5.6-terra

[catzo-agent]

PR Triage: 🔴 High risk. Needs human review.

Reviewers: @articulate/devex

Why

Risk

• 26/base/Dockerfile: adds build-system configuration for a published runtime container image → High
• README.md: documents the new image tag → Low
• Highest risk across files wins → High

Reviewers

CODEOWNERS .github/CODEOWNERS catch-all * → @articulate/devex

Code Review: ✅ Approved

The Node 26 image follows the established Node 24 image structure, and its multi-architecture build and lint checks pass. Residual risk is limited to publishing a new major runtime tag.

_{👍 👎 or quote this comment to provide feedback. · reviewed 93bc8a5 · openai/gpt-5.6-sol-fast}

[dholmes]

nit: I'd consider removing the recommended 🌟 until it is LTS