feat(gondor): cleanup gondor invocations

[sfikastheo]

• supervisor: instead of wrapping another python script, sanitizes the input, and exports it to systemd
• orb-hil: instead of calling gondor, use zorb from the runner to query supervisor's job
• update-agent: consume version_overwrite, if that is provided, overwrite /etc/os-release with that value.

The gondor binary will be removed from development builds, and be replaced by an alias to zorbquerying
supervisor.

This is a development feature to quickly allow developers to OTA to whatever they wish.
PR is spread upon commits touching the different crates separately

[github-actions]

Found two concrete issues:

• supervisor/src/tasks/zoci.rs:15: JSON requests without restart now default to false, so {"version":"to-main"} only exports the env var and never restarts worldcoin-update-agent.service. The old JSON default was restart, because no_restart defaulted to false. This silently breaks existing job/gondor JSON callers and should default restart to true or preserve no_restart compatibility.

• hil/src/commands/ota/system.rs:89: this treats zorb exit status as OTA kickoff success, but zorb query prints Zenoh error replies/no-reply termination and still exits successfully. If supervisor fails SetEnvironment/RestartUnit, HIL will continue monitoring as if the update started. Please make the runner command fail on error replies or parse/assert the query result before returning the start timestamp.

[sky-mart]

Current HIL tests still send the no_restart option, so when you update the binaries in orb-os, the OTA test is supposed to fail.

LGTM