Feat/verdaccio venv - support pr libs to work on venv

[AlexFrontegg]

Note

Medium Risk
Adds a new conditional path in the start-venv CI workflow that runs a local Verdaccio registry, publishes prerelease @frontegg/* packages, and alters image tagging/pushing behavior; failures or misconfiguration could break venv builds or produce unexpected images/appVersions.

Overview
Adds an opt-in Verdaccio mode to start-venv.yaml (useVerdaccio, templateAndLibsBranch) to build venv Docker images using locally published @frontegg/* packages from a specified template-and-libs branch.

When enabled, the workflow starts Verdaccio, detects and publishes only changed packages via lerna, rewrites registry config/lockfiles to consume the published prerelease versions, and pushes images with unique shadow-<run_id>-<attempt>-<sha> tags (or creates the tag alias when no libs changed). It also updates the venv repo appVersion values to match the shadow-* tags and adds input validation plus buildx host-networking to support the local registry.

^{Reviewed by Cursor Bugbot for commit b2c67d4. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Missing base64 -w 0 may break git auth header
  • Added -w 0 flag to base64 command to prevent line wrapping that would corrupt the authorization header for long tokens.

Or push these changes by commenting:

@cursor push ffd44feb53

Preview (ffd44feb53)

diff --git a/.github/workflows/start-venv.yaml b/.github/workflows/start-venv.yaml
--- a/.github/workflows/start-venv.yaml
+++ b/.github/workflows/start-venv.yaml
@@ -276,7 +276,7 @@
           TARGET_BRANCH: ${{ inputs.templateAndLibsBranch }}
           GH_TOKEN: ${{ secrets.GH_REPOSITORY_ADMIN_TOKEN }}
         run: |
-          AUTH="$(printf 'x-access-token:%s' "${GH_TOKEN}" | base64)"
+          AUTH="$(printf 'x-access-token:%s' "${GH_TOKEN}" | base64 -w 0)"
           git config --local http.https://github.com/.extraheader "AUTHORIZATION: basic ${AUTH}"
 
           REFSPEC_MASTER="+refs/heads/master:refs/remotes/origin/master"

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 6013780. Configure here.}