feat(microvm): add lifecycle hook service

[edersonbrilhante]

Description

Adds only the lambdas/services/microvm-lifecycle-hooks service.

• Packages the Lambda MicroVM lifecycle HTTP server as a self-contained NCC artifact.
• Preserves strict lifecycle payload validation and the documented runtime contract.
• Provides lifecycle handling for runner configuration consumption and graceful shutdown.
• Documents the Node 24/s6 Docker build, complete dist/ copy, rollout order, and least-privilege runtime requirements.

This PR is stacked on #5255 and consumes the SSM runner-config consumer supplied by the storage-provider work in #5277. It does not add storage-provider implementations or DynamoDB changes.

Test Plan

• Added unit coverage for lifecycle handling, payload validation, process management, server behavior, storage, and timing.
• git diff --check passed after rebasing onto feat(compute-providers): add Lambda MicroVM provider #5255.
• No live AWS Lambda MicroVM deployment was performed.

Related Issues

• Stacked on feat(compute-providers): add Lambda MicroVM provider #5255.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

lambdas/services/microvm-lifecycle-hooks/package.json

Package	Version	License	Issue Type
@aws-github-runner/storage-providers		Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/@aws-github-runner/storage-providers		Unknown	Unknown
npm/@types/node	^22.19.3	Unknown	Unknown
npm/@vercel/ncc	^0.38.4	Unknown	Unknown

Scanned Files

• lambdas/services/microvm-lifecycle-hooks/package.json