Verify runtime base image version

[pPrecel]

Description

Design a workflow that will fail on PR if versions for both (FIPS and non-FIPS) runtime bases are desynchronized.

Reasons

Prevent situations when the module would be released with desynchronized runtime bases.

[anoipm]

QA

Test PR: #2473

---

Legend:

• Test name — describes what scenario is being tested
• Diff — changes to runtime Dockerfiles relative to main, where all FIPS and non-FIPS image versions are in sync
• Workflow output — result of the check-fips-image-versions job

---

Test 1: desync nodejs22 FIPS version to trigger check-fips-image-versions workflow

  -FROM europe-docker.pkg.dev/kyma-project/restricted-prod/sap.com/node-fips:22.22.2-dev AS fips
  +FROM europe-docker.pkg.dev/kyma-project/restricted-prod/sap.com/node-fips:22.99.0-dev AS fips

  SKIP: components/runtimes/nodejs20/ (excluded)
  ERROR: components/runtimes/nodejs22/Dockerfile — non-FIPS version (22.22.2) != FIPS version (22.99.0)
  OK: components/runtimes/nodejs24/Dockerfile — 24.14.1
  SKIP: components/runtimes/python312/ (excluded)
  OK: components/runtimes/python314/Dockerfile — 3.14.3

---

Test 2: remove nodejs24 Dockerfile to trigger missing file check

  -components/runtimes/nodejs24/Dockerfile (deleted)

  SKIP: components/runtimes/nodejs20/ (excluded)
  OK: components/runtimes/nodejs22/Dockerfile — 22.22.2
  grep: components/runtimes/nodejs24/Dockerfile: No such file or directory
  grep: components/runtimes/nodejs24/Dockerfile: No such file or directory
  ERROR: Could not extract versions from components/runtimes/nodejs24/Dockerfile
  SKIP: components/runtimes/python312/ (excluded)
  OK: components/runtimes/python314/Dockerfile — 3.14.3

---

Test 3: remove version tag from nodejs24 FIPS image to trigger extraction failure

  -FROM europe-docker.pkg.dev/kyma-project/restricted-prod/sap.com/node-fips:24.14.1-dev AS fips
  +FROM europe-docker.pkg.dev/kyma-project/restricted-prod/sap.com/node-fips:dev AS fips

  SKIP: components/runtimes/nodejs20/ (excluded)
  OK: components/runtimes/nodejs22/Dockerfile — 22.22.2
  ERROR: Could not extract versions from components/runtimes/nodejs24/Dockerfile
  SKIP: components/runtimes/python312/ (excluded)
  OK: components/runtimes/python314/Dockerfile — 3.14.3

---

Test 4: add nodejs99 runtime without FIPS and not on SKIP_LIST to trigger check

  +components/runtimes/nodejs99/Dockerfile:
  +FROM europe-docker.pkg.dev/kyma-project/prod/external/library/node:99.0.0-alpine3.23

  SKIP: components/runtimes/nodejs20/ (excluded)
  OK: components/runtimes/nodejs22/Dockerfile — 22.22.2
  OK: components/runtimes/nodejs24/Dockerfile — 24.14.1
  ERROR: Could not extract versions from components/runtimes/nodejs99/Dockerfile
  SKIP: components/runtimes/python312/ (excluded)
  OK: components/runtimes/python314/Dockerfile — 3.14.3

---

Test 5: all FIPS image versions in sync — expect workflow to pass

  SKIP: components/runtimes/nodejs20/ (excluded)
  OK: components/runtimes/nodejs22/Dockerfile — 22.22.2
  OK: components/runtimes/nodejs24/Dockerfile — 24.14.1
  SKIP: components/runtimes/python312/ (excluded)
  OK: components/runtimes/python314/Dockerfile — 3.14.3