feat: migrate AKernel deployment to Python YuanRong CLI

[mhsong1998-dot]

Summary

• Migrate master, frontend, node, and standalone startup to the Python openYuanRong CLI.
• Preserve AKernel's existing fixed deployment and log paths instead of introducing timestamped session directories.
• Upgrade the packaged openYuanRong release to 0.10.1, including the core wheel checksums, RRT checksum, Python SDK/sandbox dependency pins, dependency constraints, and the src/yuanrong gitlink.

Runtime paths

• master/frontend: DEPLOY_PATH=/home/yuanrong/master, YR_LOG_PATH=/home/yuanrong/master/log
• node/standalone: DEPLOY_PATH=/home/yuanrong, YR_LOG_PATH=/home/yuanrong/logs
• DataSystem master/worker, FunctionProxy runtime logs, the Python CLI daemon, and OTel use the role's YR_LOG_PATH.
• The startup chain does not pass --log-dir-prefix and does not generate timestamps.

Review fixes

• Render standalone node IP and embedded-etcd ports consistently.
• Keep external resource collection for node and standalone roles.
• Derive sandbox DNS from node.sandboxIPRange.
• Fail image builds if either wheel safety patch no longer matches.
• Use the complete Python 3.12 dependency constraint set.
• Use Pod IP as values.host_ip, wait for sandbox0 IPv4 readiness, and use its bridge address as values.local_ip for the dual-address FunctionProxy path.

Validation

Current HEAD: 1852878cb054abc569db5a9f2a888073101ccb73, one author-signed Conventional Commit.

• Built linux/amd64 runtime image akernel-ci/runtime:pr19-1852878-0.10.1-amd64.
• Built linux/amd64 all-in-one image akernel-ci/all-in-one:pr19-1852878-0.10.1-amd64 (sha256:2edbe7881be46ecffd3cdc9b9ecfedbadc1b16865471ff2b35cd48f6bb2c14bd).
• Verified the image contains openyuanrong-core==0.10.1; yr --help, OTel Collector, RRT rootfs, and both wheel safety patches passed smoke checks.
• Rendered and merged standalone configuration with the packaged CLI. Verified grpc_listen_port=22773, component_grpc_port=22774, Pod host_ip, and distinct sandbox bridge local_ip.
• Verified the 0.10.1 YuanRong gitlink and its merged FunctionSystem component gRPC implementation are present.

The local build used exact OBS 0.10.1 artifacts through temporary build arguments because public GitHub/PyPI publication was not yet complete when validated. No credential, test/plan file, temporary download URL, mirror, or trusted-host setting is committed.

[tianyuzhou95]

One remaining process issue before merge: the current commit body contains only the Signed-off-by trailer. The repository's AGENTS.md requires a Conventional Commit with a prose body explaining what changed and why, followed by the DCO sign-off. Please amend the commit message accordingly.

Also, GitHub currently reports no checks for this branch. The validation documented in the PR is extensive, but there is no automated status attached to the commit. Please ensure the expected CI checks are configured and passing before merge, or explicitly confirm that this repository does not currently provide PR checks.

[mhsong1998-dot]

Process items are addressed in current HEAD 1e30b39: the branch contains one lowercase Conventional Commit with a prose body, and its author, committer, and Signed-off-by trailer all match mhsong1998-dot. GitHub created CI run 32334113441 for this head, but currently marks it action_required, so a maintainer must approve the fork workflow before the checks can execute. The previously approved head passed all eight CI jobs.