Kubernetes: add `read_only` volume property (#3838)

If set to `true`, enforces `readOnly: true` in `volumeMounts[]`

Closes: #3837

Disable go-integration-tests for release (#3791)

Verda: make startup script and SSH key lifecycle per-instance with re…

…liable cleanup (#3718)

* Make Verda startup scripts and SSH keys lifecycle symmetric

* Fix Verda test imports for Python 3.9 collection

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <36324149+jvstme@users.noreply.github.com>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <36324149+jvstme@users.noreply.github.com>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <36324149+jvstme@users.noreply.github.com>

* Update src/dstack/_internal/core/backends/verda/compute.py

Co-authored-by: jvstme <36324149+jvstme@users.noreply.github.com>

* Fix Verda terminate tests for merge-base API args

---------

Co-authored-by: Andrey Cheptsov <andrey.cheptsov@github.com>
Co-authored-by: jvstme <36324149+jvstme@users.noreply.github.com>

Tests: bump pytest-asyncio>=0.25.2 (#3733)

Fixes "coroutine method 'aclose' of <async_generator> was never awaited"
warnings in pytest logs

See: pytest-dev/pytest-asyncio#759
See: pytest-dev/pytest-asyncio#1034

Fix SELinux denials and "Text file busy" on SSH fleet provisioning (#…

…3712)

The shim binary download uses cp to copy from /tmp to /usr/local/bin/.
This causes two issues:

1. "Text file busy" (ETXTBSY) when re-provisioning without cleanup,
   because cp tries to write to a running executable. Revert to mv
   which atomically replaces the directory entry.

2. On SELinux-enforcing hosts (RHEL, Rocky), mv from /tmp preserves
   the user_tmp_t context. Add chcon to set the correct bin_t context.
   No-op on non-SELinux systems via 2>/dev/null || true.

Co-authored-by: Andrey Cheptsov <andrey.cheptsov@github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Respect top-level `blocks` in SSH fleet configuration (#3700)

Fixes: #3278

[Azure] Add support for H100 NVL and H200 VM series; refactor instanc…

…e creation methods to cleanup failed instances (#3699)

Co-authored-by: Andrey Cheptsov <andrey.cheptsov@github.com>

Fix CLI compatibility with older servers (#3664)