ci(native): fix linux-x86-64 rebuild on manylinux_2_28

GitHub now forces actions onto Node 24 (glibc >= 2.27), which cannot run
inside the manylinux2014 (glibc 2.17) container the linux-x86-64 native
build used; actions/checkout failed before compilation. The old
Node-20-glibc-217 override only patched /__e/node20, not /__e/node24.

Switch the job to quay.io/pypa/manylinux_2_28_x86_64 (glibc 2.28, runs
stock Node 24) and drop the Node hack, nasm src.rpm rebuild, and manual
CMake download, mirroring the linux-aarch64 job that already builds on
manylinux_2_28.

Author: bluestreak01

.github/workflows/rebuild_native_libs.yml

@@ -68,57 +68,31 @@ jobs:
           key: nativelibs-osx-${{ github.sha }}
   build-all-linux-x86-64:
     runs-on: ubuntu-latest
-    # manylinux2014 is a container with new-ish compilers and tools, but old glibc - 2.17
-    # 2.17 is old enough to be compatible with most Linux distributions out there
+    # manylinux_2_28 (glibc 2.28) replaces the previous manylinux2014 (glibc
+    # 2.17) container: GitHub Actions now forces actions (checkout, cache) onto
+    # Node 24, whose binary requires glibc >= 2.27, so it can no longer run
+    # inside the glibc-2.17 image (the old Node-20-glibc-217 override hack only
+    # patched /__e/node20, not /__e/node24). 2.28 still runs stock Node 24 and
+    # matches the linux-aarch64 job, which already ships glibc-2.28 binaries.
     container:
-      image: quay.io/pypa/manylinux2014_x86_64
-      volumes:
-        - /node20217:/node20217
-        - /node20217:/__e/node20
+      image: quay.io/pypa/manylinux_2_28_x86_64
     steps:
-      - name: Install tools, most are needed to build nasm
-        run: |
-          ldd --version
-          yum update -y
-          yum install 'perl(Env)' perl-Font-TTF perl-Sort-Versions gcc wget perf asciidoc xmlto ghostscript adobe-source-sans-pro-fonts adobe-source-code-pro-fonts rpm-build zstd curl -y
-      - name: Build nasm
-        # we need nasm 2.14+ due to this bug https://bugzilla.nasm.us/show_bug.cgi?id=3392205
-        # manylinux2014 distribution includes nasm 2.10
-        # the nasm project itself provides RPMs, but they built against a newer glibc and other dependencies too
-        # thus we take src.rpm from nasm project and rebuild it in the manylinux2014 container
-        # this way we get a nasm binary that is compatible with the manylinux2014 environment
-        run: |
-          wget https://www.nasm.us/pub/nasm/releasebuilds/2.16.03/linux/nasm-2.16.03-0.fc39.src.rpm
-          rpmbuild --rebuild ./nasm-2.16.03-0.fc39.src.rpm
-          rpm -i ~/rpmbuild/RPMS/x86_64/nasm-2.16.03-0.el7.x86_64.rpm
-      - name: Install Node.js 20 glibc2.17
-        # A hack to override default nodejs 20 to a build compatible with older glibc.
-        # Inspired by https://github.com/pytorch/test-infra/pull/5959 If it's good for pytorch, it's good for us too! :)
-        # Q: Why do we need this hack at all? A: Because many github actions, include action/checkout@v4, depend on nodejs 20.
-        # GitHub Actions runner provides a build of nodejs 20 that requires a newer glibc than manylinux2014 has.
-        # Thus we download a build of nodejs 20 that is compatible with manylinux2014 and override the default one.
-        run: |
-          curl -LO https://unofficial-builds.nodejs.org/download/release/v20.9.0/node-v20.9.0-linux-x64-glibc-217.tar.xz
-          tar -xf node-v20.9.0-linux-x64-glibc-217.tar.xz --strip-components 1 -C /node20217
-          ldd /__e/node20/bin/node
       - uses: actions/checkout@v4
         with:
           submodules: true
-      - name: Install up-to-date CMake
+      - name: Install tooling
         run: |
-          wget -nv https://github.com/Kitware/CMake/releases/download/v3.29.2/cmake-3.29.2-linux-x86_64.tar.gz
-          tar -zxf cmake-3.29.2-linux-x86_64.tar.gz
-          echo "PATH=`pwd`/cmake-3.29.2-linux-x86_64/bin/:$PATH" >> "$GITHUB_ENV"
+          yum update -y
+          yum install wget nasm zstd -y
       - name: Install GraalVM JDK 25 (for jni.h)
         run: |
-          wget -nv -O graalvm.tar.gz https://download.oracle.com/graalvm/25/latest/graalvm-jdk-25_linux-x64_bin.tar.gz
+          wget -v --timeout=180 -O graalvm.tar.gz https://download.oracle.com/graalvm/25/latest/graalvm-jdk-25_linux-x64_bin.tar.gz
           mkdir graalvm
           tar xfz graalvm.tar.gz -C graalvm --strip-components=1
           echo "JAVA_HOME=`pwd`/graalvm" >> "$GITHUB_ENV"
       - name: Generate Makefiles
         run: |
           cd ./core
-          # git submodule update --init
           cmake -DCMAKE_BUILD_TYPE=Release -B cmake-build-release -S.
       - name: Build linux-x86-64 CXX Library
         run: |