CI: Use precompiled Director release - #341

bosh-deployment/openstack/cpi.yml wires the Ruby openstack_cpi job,
whose openstack-ruby-3.1 package compiles at create-env time (~9 min
on the worker plus ~5 min on the director VM).

Add use-golang-cpi.yml, applied after cpi.yml, to point the director's
cpi_job, cloud_provider template, and bosh instance-group job at
openstack_cpi_golang instead. The Go job takes the same openstack.*
properties and only needs the golang-1-linux package, so create-env no
longer builds the Ruby runtime. BATS now exercises the Go CPI
end-to-end against DevStack.

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

The bosh-release resource_type (dpb587/bosh-release-resource) is not
referenced by any resource, and teardown-director.{yml,sh} is not
referenced by the pipeline. Remove them.

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

… exists

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

Co-authored-by: Saumya Dudeja <saumya.dudeja@sap.com>

Build-tag-gated (lifecycle) harness that drives cpi.Execute against a real
OpenStack from BOSH_OPENSTACK_* env: config loader, execCPI (stdin/stdout),
typed method wrappers with best-effort cleanup, and stemcell.MF parsing.

Covers CPI-method-level behaviors the mocked integration suite and BATS do
not exercise against real OpenStack: stemcell Glance props + light stemcell,
Cinder volume types + set_disk_metadata/snapshot/resize, calculate_vm_cloud_
properties, config_drive multi-NIC, VRRP/allowed_address_pairs, security
groups by name/id, pre-existing port, use_nova_networking, boot-from-volume
variants, human-readable names, and error paths.

Extracts terraform metadata + auth into BOSH_OPENSTACK_* env and runs the
lifecycle-tagged Go suite via ginkgo. Wired into run-devstack-tests via the
manual-apply pipeline.

The multiple-manual-network precondition errored when config_drive was set
(ConfigDrive != "") — the inverse of the Ruby CPI (!config_drive) and of the
error message itself, which requires config_drive to be present. Flip to
ConfigDrive == "". Correct the mocked integration test that had encoded the
inverted behavior and the unit fixtures that relied on it.

Found by the real-OpenStack lifecycle suite (multi-NIC + config_drive).

- Light stemcell returns the resolved image id (no ' light' suffix, unlike the
  Ruby CPI); assert Equal instead of a substring.
- preCreatePort now looks up the subnet id (ports.IP.SubnetID has no omitempty,
  so an empty value was rejected by Neutron).

VMs using the project 'default' security group deterministically fail to boot
on the CI DevStack (nova ERROR state), while the specs that pass an explicit
terraform-created group boot fine — matching how BATS deploys. Default to
BOSH_OPENSTACK_SECURITY_GROUP_NAME when available.

Drop 'set -x', which dumped the whole command trace before BATS — including
the jumpbox SSH key, admin password, and CA cert. Also fix shellcheck:
split the secret exports (SC2155), quote expansions (SC2086), read
bats_rspec_tags into an array, and annotate the runtime-exported vars.