apollo_deployments: test hybrid layout for infra config

[nimrod-starkware]

Add the jrsonnet evaluator (workspace + dev-deps) and a test-only jsonnet
harness that evaluates services/.jsonnet and asserts each service's
derived components matches the Rust get_component_configs source of truth
(url/port excluded — those are deploy-time placeholders on the Rust side).

Also fixes derive.infraFor to delegate to a file-level helper instead of
self.componentsFor (self rebinds to the returned object literal).

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

[nimrod-starkware]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• apollo_deployments: check applicative config matches deployed app_configs #14489 : 3 dependent PRs (#14480 , #14505 , #14606 )
• apollo_deployments: assemble and deserialize node config from jsonnet #14487
• apollo_deployments: assemble full node config via build.libsonnet #14486
• apollo_deployments: distributed layout jsonnet test #14485
• apollo_deployments: consolidated layout jsonnet test #14484
• apollo_deployments: test hybrid layout for infra config #14483 👈 (View in Graphite)
• apollo_deployments: introduce hybrid layout for infra config #14482
• apollo_deployments: introduce jsonnet building blocks for infra config #14481
• apollo_deployments: jsonnet applicative config #14479
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[reviewable-StarkWare]

This change is 

[cursor]

PR Summary

Low Risk
Changes are confined to tests and new dev/eval dependencies; production deployment generation paths are unchanged unless other code starts calling the jsonnet evaluator.

Overview
Adds jrsonnet (jrsonnet-evaluator, jrsonnet-stdlib) to the workspace and wires a test-only jsonnet module that evaluates services/<layout>.jsonnet and compares each service’s components to the Rust get_component_configs output from the matching layout (e.g. hybrid / hybrid.rs).

Comparisons strip url and port on each component because Rust leaves those as deploy-time placeholders while jsonnet may embed concrete values.

A new test hybrid_infra_matches_rust runs this check for HybridNodeServiceName. Cargo.lock picks up jrsonnet’s transitive graph (and assorted version bumps elsewhere in the lockfile).

^{Reviewed by Cursor Bugbot for commit abad9bf. Bugbot is set up for automated code reviews on this repo. Configure here.}