fix: refresh SSO integration submodules

[miki3421]

Summary

• update the admin-api, CLI, testing, and task submodule pointers for the SSO integration
• build the admin-api image with the admin-api commit tag instead of the operator tag
• preinstall the admin-api Python runtime dependencies so system-api does not download packages when the pod starts
• restore the complete OPS release test workflow and fix embedded Task version detection instead of removing tests
• include readiness, test-runner, and pinned GitHub Actions fixes validated in the local Lima Kind cluster

Subrepo dependencies and merge order

1. Fix embedded Task version detection sciabarracom/task#1 (ready for review) fixes Task version discovery when embedded in OPS.
2. Restore release tests with embedded Task version fix openserverless-cli#34 (draft) restores the original task tests; after Task Add .asf.yaml enabling issues tracker, discussions, branch protection policy, ... #1 is merged and tagged, its temporary fork replacement must be changed to the official tag.
3. Preinstall Python dependencies in system API image openserverless-admin-api#32 preinstalls Python dependencies in the image.
4. This PR can be finalized after the CLI and admin-api commits are available from their Apache repositories.

Already merged and retained:

• fix: add admin API readiness probe openserverless-admin-api#28: readiness probe
• Add SSO configuration and login flows openserverless-cli#30: SSO CLI support
• fix: propagate and retry SSO test failures openserverless-testing#7: SSO failure propagation/retry (192a6b3)
• fix: wait for system API readiness openserverless-task#207: deployment task updates

Current staged pointers

• admin-api: f5cb6e4 (Preinstall Python dependencies in system API image openserverless-admin-api#32)
• CLI: bb63d07 (Restore release tests with embedded Task version fix openserverless-cli#34)
• testing: 192a6b3 (already merged)

Validation

• embedded Task regression unit tests pass
• OPS Bats suites vars, prefixes, and retry pass with the fixed Task dependency
• go test ./config ./tools ./auth passes
• the release workflow still runs the original task tests command
• ./testing/tests/11-sso-mock.sh kind in Lima/Kind retries transient 503 responses and propagates permanent failures
• full test runner propagates failed child exit codes
• git diff --check passes

Notes

No PR in openserverless-testing is needed: its definitive runner fix is already on main. Do not merge this parent PR before the two open subrepo dependencies above are finalized.