[eas-build-job] add DeviceRunSession.Job

[szdziedzic]

Why

EAS Simulator sessions (device run sessions) currently reach the worker as a Generic.Job with a hand-built list of eas/* steps. The steps engine runs strictly in sequence, so the build download, tool installs, and TURN credential fetch all wait for the simulator boot, and ordering rules such as "capture must start before the app launches" live only in the API server's step lists. See the discussion in expo/universe#30577.

This is the first PR of a stack that gives sessions a typed job payload and a worker-owned lifecycle:

1. [eas-build-job] add DeviceRunSession.Job #4412 (this PR) [eas-build-job] the DeviceRunSession.Job payload
2. [build-tools] add device run session runner #4413 [build-tools] the session runner
3. [worker] run device run session jobs #4414 [worker] dispatch

How

• Adds DeviceRunSession.Job (packages/eas-build-job/src/deviceRunSessionJob.ts): a Zod schema describing the session (controller, duration, idle timeout, tunnel domain), the device (iOS or Android, discriminated on platform), the optional application to install and launch, and the optional local egress.
• type: 'device-run-session' is the job-family discriminator. Generic.JobZ already reserves platform and type as never for this purpose; build jobs use type for their Workflow, generic jobs leave it undefined, and session jobs set this literal. The comment in generic.ts now names all three families.
• Exports Generic.BuilderEnvironmentSchemaZ so the new schema reuses it.
• No metricsCorsOrigin field: since [build-tools] pass the website origin to serve-sim #4437 the worker derives the serve-sim CORS and framing origins from the website origin itself, and expo/universe#31252 stopped sending EAS_SIMULATOR_METRICS_CORS_ORIGIN. session is a non-strict object, so a payload that still carries the field parses and the field is dropped.
• This PR does not add the new job to the Job union yet; [build-tools] add device run session runner #4413 does that together with the code that handles it.

Test Plan

• New schema tests: valid iOS and Android payloads round-trip, and the schema rejects local egress on Android, an idle timeout that is not shorter than the duration, two application sources, a build-job type, a set platform, and an empty session id.
• yarn typecheck, yarn lint, yarn fmt:check, and cd packages/eas-build-job && yarn test pass.

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.44%. Comparing base (b1f886e) to head (0034062).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4412      +/-   ##
==========================================
+ Coverage   72.42%   72.44%   +0.02%     
==========================================
  Files         975      976       +1     
  Lines       46617    46642      +25     
  Branches    10069    10076       +7     
==========================================
+ Hits        33760    33785      +25     
  Misses      11857    11857              
  Partials     1000     1000              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

✅ Thank you for adding the changelog entry!