Address follow-up CSCS review feedback

[robobryce]

Addresses the latest review comments on #215.

• keeps Compose build metadata but enforces pull-only behavior in automatic Podman test/start/shell paths
• uses host networking for the one-shot rootless Podman base test because Daint disallows veth creation
• reduces the nsys/ncu wrappers to two execution branches
• removes unnecessary Nsight Streamer pre-delete workarounds after inspecting both 2026.1.1 platform images
• publishes EDFs for every tutorial and removes the committed generated copies
• updates CSCS documentation and validation to consume the generated-branch EDF

Live Daint validation of the CI-built ARM64 image completed on GH200: 11 package tests passed, all 14 notebooks passed, direct nsys and ncu profiling passed, and the final rootless Podman no-build test passed all 11 package tests. Local Bash, Python, Ruff, YAML, Actions, Compose, transform, EDF-generation, and diff checks also passed.

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[github-actions]

👋 Thank you for your contribution!

This pull request is from a forked repository so GitHub Actions will not be able to run CI. A maintainer will review your changes shortly and manually trigger the CI.

@maintainers Please review this PR when you have a chance and follow the instructions in the CONTRIBUTING.md file to trigger the CI.