fix(ci): fix Docker push permissions, macOS disk space, and audit summary overflow

- build-publish-images: replace silent sudo chown failure (2>/dev/null || true)
  with proper error handling and fallback cleanup for all 7 push jobs.
  Root cause: container build jobs create root-owned files, non-container push
  jobs on runner2 couldn't sudo chown without sudoers config.
- tests-misc: add disk cleanup step to cargo-check-all-crate-macos job to free
  space before cargo check (remove Android SDK, old CLT SDKs, etc.)
- security-audit: truncate cargo-audit output to 500 lines before writing to
  GITHUB_STEP_SUMMARY to avoid the 1MB size limit crash.

.github/workflows/security-audit.yml

@@ -60,7 +60,11 @@ jobs:
           if [ $RESULT -ne 0 ]; then
             echo "### Vulnerabilities found" >> $GITHUB_STEP_SUMMARY
             echo '```' >> $GITHUB_STEP_SUMMARY
-            cat audit-output.txt >> $GITHUB_STEP_SUMMARY
+            # Truncate output to avoid GITHUB_STEP_SUMMARY 1MB limit
+            head -500 audit-output.txt >> $GITHUB_STEP_SUMMARY
+            if [ "$(wc -l < audit-output.txt)" -gt 500 ]; then
+              echo "... (truncated, see full output in job logs)" >> $GITHUB_STEP_SUMMARY
+            fi
             echo '```' >> $GITHUB_STEP_SUMMARY
             exit $RESULT
           else