Add runtime type information to worker heartbeats

[Sushisource]

What changed?
Title

Why?
Help us understand customer environments. SDKs will include an opt-out flag.

Breaking changes

Server PR

[github-actions]

Opengrep — new findings

Severity	Location	Rule	Message
ERROR	.github/workflows/create-release.yml:25	security.gha.missing-explicit-permissions-temporal	No explicit GITHUB_TOKEN permissions found at the workflow or job level. Add a permissions: block at the workflow root (applies to all jobs) or per job with least privilege (e.g., contents: read and only specific writes like pull-requests: write if needed).
ERROR	.github/workflows/create-release.yml:30	security.gha.missing-explicit-permissions-temporal	No explicit GITHUB_TOKEN permissions found at the workflow or job level. Add a permissions: block at the workflow root (applies to all jobs) or per job with least privilege (e.g., contents: read and only specific writes like pull-requests: write if needed).
ERROR	.github/workflows/create-release.yml:99	security.gha.missing-explicit-permissions-temporal	No explicit GITHUB_TOKEN permissions found at the workflow or job level. Add a permissions: block at the workflow root (applies to all jobs) or per job with least privilege (e.g., contents: read and only specific writes like pull-requests: write if needed).
ERROR	.github/workflows/trigger-api-go-update.yml:16	security.gha.missing-explicit-permissions-temporal	No explicit GITHUB_TOKEN permissions found at the workflow or job level. Add a permissions: block at the workflow root (applies to all jobs) or per job with least privilege (e.g., contents: read and only specific writes like pull-requests: write if needed).

---

Suppress findings

Add a noopengrep comment on the line before the finding:

# noopengrep: <rule-id>

[02strich]

Is there more than one type possible? Like python in docker?

[yuandrew]

the field in the heartbeat is repeated, so we can include multiple

// be repeated for scenarios like "Python inside a Lambda".

[yuandrew]

Actually, does it make sense to have RuntimeType type = 1; to be repeated here? Would we expect the version of multiple runtimes in the heartbeat to diverge, or will they always be the same?

[jmaeagle99]

Should there be an UnspecifiedPlatform in case someone is running on something that isn't Windows, Linux, or MacOS (e.g. BSD). Idk if we'd want an optional name field (so then is it really unspecified?) and version. Maybe named OtherPlatform?

[Sushisource]

OtherPlatform makes sense

[Sushisource]

This might sit for a bit since @rkannan82 wants to possibly line it up with the register worker API

[Sushisource]

Relates to temporalio/sdk-typescript#1964

[Sushisource]

We're no longer gonna wait on register to be created first