apollo_deployments: introduce hybrid layout for infra config

[nimrod-starkware]

Pure-data hybrid layout descriptor (6 services) transcribed from hybrid.rs and
the hybrid overlay service YAMLs, plus the infra-only service renderer that maps
each service through derive.componentsFor.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

[nimrod-starkware]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• apollo_deployments: regression test hybrid evaluation #14509 : 2 dependent PRs (#14529 , #14530 )
• apollo_deployments: CLI tests using testing overrides #14508
• apollo_deployments: introduce new CLI #14507
• apollo_deployments: flat to nested json util #14506
• apollo_deployments: jsonnet generation module #14505
• apollo_deployments: check applicative config matches deployed app_configs #14489
• apollo_deployments: assemble and deserialize node config from jsonnet #14487
• apollo_deployments: assemble full node config via build.libsonnet #14486
• apollo_deployments: distributed layout jsonnet test #14485
• apollo_deployments: consolidated layout jsonnet test #14484
• apollo_deployments: test hybrid layout for infra config #14483
• apollo_deployments: introduce hybrid layout for infra config #14482 👈 (View in Graphite)
• apollo_deployments: introduce jsonnet building blocks for infra config #14481
• apollo_deployments: test overrides list match #14480
• apollo_deployments: jsonnet applicative config #14479
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[reviewable-StarkWare]

This change is 

[cursor]

PR Summary

Low Risk
Additive declarative infra config only; risk is mainly transcription drift from hybrid.rs, not changes to runtime auth or business logic in this diff.

Overview
Adds hybrid as a Jsonnet-driven deployment layout alongside the existing Rust hybrid.rs definitions.

lib/layouts/hybrid.libsonnet holds the layout as data: six services (committer, core, gateway, l1, mempool, sierra_compiler) with per-service runs / uses, shared catalog ports, Kubernetes-style serviceDns names, remote-client scale (idle + retries), and localOnly reactive components (config_manager, mempool_p2p).

services/hybrid.jsonnet renders infra for every service by calling derive.infraFor(hybrid, service), producing each service’s components map from that descriptor.

^{Reviewed by Cursor Bugbot for commit 8e97777. Bugbot is set up for automated code reviews on this repo. Configure here.}