feat(#EE-808): rewrite sync-catalog-context as plain .mjs

[rogiervanstraten]

Converts scripts/sync-catalog-context.ts to a dependency-free .mjs script, removing the need for tsx, typescript, package.json, and tsconfig.json. Aligns the workflow with catalog-context conventions (action versions, node 24, consolidated secrets step, dry-run input).

Closes EE-808

---

Note

Medium Risk
Automated enum updates can break entity validation when catalog-context removes values; the workflow also uses release credentials to open PRs, though changes are reviewable before merge.

Overview
Adds automated syncing of canonical enum values from the catalog-context repo into this repo’s Datadog catalog v3 JSON schemas.

A new sync-catalog-context GitHub Actions workflow runs on a weekly schedule, on catalog-context-release repository dispatch, or manually (with an optional dry-run that skips opening a PR). It authenticates via GCP/GitHub App, downloads *.schema.json assets from the latest catalog-context release, runs the sync, and opens or updates a labeled PR on chore/sync-catalog-context when not in dry-run.

The sync is implemented as a dependency-free scripts/sync-catalog-context.mjs invoked with node (no tsx/TypeScript toolchain). It reads tier, lifecycle, domain, and service-type sources and rewrites partials/spec-defaults, partials/extensions-defaults, partials/tags-defaults, and service.schema.json (lifecycle/tier, domain/area allOf, tag mirroring, service type enum). The workflow PR body calls out that removed enum values can break validation after merge/release.

^{Reviewed by Cursor Bugbot for commit 1dd46a6. Bugbot is set up for automated code reviews on this repo. Configure here.}