… add test tiering, scope Docker cleanup

- Remove container_runtime matrix (docker/finch/no-container) in favor of explicit test_suite entries
- Split build tests into build-x86, build-arm64, build-x86-container, build-arm64-container
- Merge local-start1/local-start2 into local-start with -n 2 parallelism
- Add cloud-based-tests job using @pytest.mark.requires_credential marker
- Skip credential-requiring tests (SAR, layers, STS) in local-only jobs via SAM_CLI_NO_CREDENTIALS
- Scope Docker container/image cleanup to per-test-class snapshots to prevent cross-worker interference
- Extract credential setup/reset into setup_testing_resources.py and reset_testing_resources.py
- Update credential test runtimes: dotnet10, java25, python3.12, ruby3.4, nodejs22.x, provided.al2023 for Go
- Remove Free up disk space step
- Add uv availability check in Makefile init

…dates, schema registry lookup

- Add requires_credential marker to terraform S3 backend and layer tests
- Exclude requires_credential tests from terraform job, run in cloud-based-tests
- Remove AWS credentials from terraform job (no longer needed)
- Add Terraform install to cloud-based-tests job
- Fix java25 dir rename and pom.xml compiler version
- Add go.sum for Go STS credential test
- Remove global Docker image cleanup from WarmContainersRemoteLayers tests
- Add xdist_group markers for durable tests (port 9014) and rapid image tests
- Use --dist loadgroup for local-invoke and local-start jobs
- Fix EventBridge schema registry tests with dynamic position lookup
- Update CONTRIBUTING.md with integration test guidelines

… jobs

- All jobs now get credentials unconditionally (remove conditional OIDC/ECR/reset)
- Use -m "not requires_credential" in build/local jobs instead of SAM_CLI_NO_CREDENTIALS env var
- Remove SKIP_CREDENTIAL_TESTS and skipIf patterns from test files
- Remove requires_credential from terraform tests (run in terraform jobs directly)
- Split terraform into terraform-build (-n 4) and terraform-local (sequential)
- Mark TestBuildCommand_LayerBuilds as requires_credential
- Add xdist groups: durable (callback, execution), remote_layers, docker_watcher
- Add TestSamPython36HelloWorldIntegrationImages to docker_images group
- Update CONTRIBUTING.md with simplified marker-only approach

…st groups

- Fix verify_pulled_image/verify_docker_container_cleanedup to use python3.11
  matching the actual template runtimes (was incorrectly hardcoded to python3.12)
- Make test_delete_no_prompts_with_s3_prefix_present_zip robust against deploy
  failures (CloudFormation EarlyValidation hooks)
- Add xdist groups for TestSamPython36HelloWorldIntegrationImages (docker_images),
  TestLocalCallback/TestLocalExecution (durable),
  WarmContainersRemoteLayers* (remote_layers),
  Watching*Image*/DockerFileLocation* (docker_watcher)

- Split local-start into local-start-api and local-start-lambda
- Split sync into sync-code (-n 2) and sync-watch (sequential)
- Split package-delete-deploy into package (+ delete) and deploy
- Remove Docker image cleanup from layer tests (images persist, reused)
- Add lambda_layers xdist group to all layer test classes
- Add flaky(reruns=3) at class level for TestLayerVersion
- Update Node.js STS SDK to ^3.700.0 (fix @smithy/protocol-http missing)

- build-x86 -> build-x86-1 (general) + build-x86-2 (language-specific)
- build-x86-container -> build-x86-container-1 + build-x86-container-2
- build-arm64-container -> build-arm64-container-1 (non-java) + build-arm64-container-2 (java)
- terraform-local -> terraform-start-api + terraform-invoke-start-lambda
- Update all setup step conditions for new job names
- Remove samcli image cleanup from layer tests, add lambda_layers xdist group

… test files are auto-included

- Move test_build_cmd_python.py and test_build_cmd_java.py to build-x86-1/container-1
- Move test_sync_build_in_source.py from sync-code to sync-watch

…ts as requires_credential

- Add early reset step after ECR login for build/local jobs to free test account
- Skip final reset for jobs that already released early
- Mark TestSamPython36HelloWorldIntegrationImages and TestDeleteOldRapidImages as requires_credential

…iner assertion

- Merge S3 report upload into reset_testing_resources.py (always uploads, conditionally resets)
- Use SKIP_ACCOUNT_RESET env var for local-only jobs instead of workflow condition
- Delete standalone upload_test_report.py
- Fix TestWarmContainersHandlesSigTermInterrupt to use assertGreaterEqual for container count

- Add @pytest.mark.tier1 to 23 test classes across all feature areas
- Fix S3 report upload: use configure-aws-credentials role-chaining for OIDC->RoleA->RoleB
- Simplify upload_test_reports to use default credentials (set by workflow)
- Add tier1 markers for: durable, layers, sync, deploy, terraform, regression, callback, execution
- Update TIER1_TESTS.md with complete coverage table

…ions)

…ust import

- Add tier1-finch to matrix with conditional Finch setup, ECR login, and runtime
- Move setup_finch.sh from scripts/ to tests/
- Add tier1-finch to all toolchain setup conditions
- Remove separate tier1-finch job (now part of matrix)
- Fix missing pytest import in test_build_cmd_rust.py

…o conflict

… cases, add missing commands

- Move tier1 from class-level to method-level with dedicated test_tier1_* methods
- Add container + non-container tier1 for each runtime (Python, Java, Node, Dotnet, Rust, Provided)
- Remove duplicated parameterized cases covered by tier1 methods
- Add tier1 for: sam delete, sam package, symlink builds, layer builds, sam sync
- Fix missing pytest imports in delete and package tests
- Revert cargo-lambda to pip install
- Update CONTRIBUTING.md and TIER1_TESTS.md

- Fix tier1 methods that called parameterized methods (inline logic instead)
- Fix dotnet validate_build_command params (mode=None, use_container=True)
- Fix Python tier1 skip condition to check template and codeuri
- Add ARM64 tier1 build tests: Python, Java, Node, Ruby, Provided, Rust
- Update TIER1_TESTS.md with ARM64 section

…ams, skip ARM64 without Docker

- Restore test_tier1_rust_build_in_container (was accidentally deleted)
- Fix dotnet container tier1 to use dotnet8 (dotnet10 container image not available)
- Fix layer tier1 to use correct overrides (LayerContentUri, python3.11)
- Add skipIf(SKIP_DOCKER_TESTS) to ARM64 tier1 tests (need Docker for invoke)
- All container tier1 methods have _in_container suffix for -k filter compatibility

- Dotnet container: use mount_mode=MountMode.WRITE (not use_container=True)
- Layer build: use python3.12 (matching original test_build_single_layer)
- Rust: remove container tier1 (cargo-lambda doesn't support container builds)
- These match the exact parameter combinations that pass in the original tests

…emove temp docs

- Revert ARM64 tier1 names (no _in_container since use_container=False)
- Enable QEMU for build-arm64 job (needed for local invoke)
- Fix mypy import error in setup_testing_resources.py
- Remove Rust container tier1 (cargo-lambda doesn't support container builds)
- Fix dotnet container tier1 to use MountMode.WRITE
- Fix layer tier1 to use python3.12
- Remove CLOUD_VS_LOCAL_REPORT.md and TIER1_TESTS.md

…iering

…iering