Updated Homebrew install instructions

docs: update ingress gateway runnable demo

Using the environment variable stopped working here a while back,
should be using the port label. Also upgrade to uuid-api:v5 which
supports linux/arm64.

structs: namespace port validation by host_network

e2e: account for race condition in periodic dispatch test.

The encryption key uses 32 bytes now, not 16 bytes

This is a supplement to #9831 to incorporate the extracted
missing-permissions error handling from #9909.

It fixes this failure on the main branch! 
https://app.circleci.com/pipelines/github/hashicorp/nomad/14728/workflows/4c147dca-fd1e-4de7-86aa-90ded7aabad2/jobs/137137

This closes #8744 and #9826.

It necessitated some customisation options for TwoStepButton. One is inlineText, which puts the confirmation text in the same line as the buttons. Also, there was a single-use configuration option named isInfoAction that I removed in favour of passing a set of class configuration options like this:

                @classes={{hash
                  idleButton="is-warning"
                  confirmationMessage="inherit-color"
                  cancelButton="is-danger is-important"
                  confirmButton="is-warning"}}

Since [mounts](https://www.nomadproject.io/docs/drivers/docker#mounts) is deprecated,
switch to newer `mount` in `task.config` for `docker` driver.

drivers/exec+java: Add task configuration to restore previous PID/IPC isolation behavior

consul/connect: enable custom sidecars to use expose checks

This PR enables jobs configured with a custom sidecar_task to make
use of the `service.expose` feature for creating checks on services
in the service mesh. Before we would check that sidecar_task had not
been set (indicating that something other than envoy may be in use,
which would not support envoy's expose feature). However Consul has
not added support for anything other than envoy and probably never
will, so having the restriction in place seems like an unnecessary
hindrance. If Consul ever does support something other than Envoy,
they will likely find a way to provide the expose feature anyway.

Fixes #9854

This closes #7459.

While emoji don’t actually need escaping, expanding the
expression that enumerates all task name characters that
don’t need escaping to include emoji is prohibitive, since
it’s a discontinuous range. The emoji-regex project has
such an expression and it’s 12kB.

This fixes the regular expression to property escape emoji
as a single character instead of as its component bytes.
Thanks to @DingoEatingFuzz for the suggestion.

This PR adds pid_mode and ipc_mode options to the exec and java task
driver config options. By default these will defer to the default_pid_mode
and default_ipc_mode agent plugin options created in #9969. Setting
these values to "host" mode disables isolation for the task. Doing so
is not recommended, but may be necessary to support legacy job configurations.

Closes #9970

ar: isolate network actions performed by client

This changes the license-fetching endpoint to respond with 204 in
OSS instead of 501. It closes #9827.

drivers/exec+java: Add configuration to restore previous PID/IPC namespace behavior

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

Co-authored-by: Chris Baker <1675087+cgbaker@users.noreply.github.com>

This PR adds default_pid_mode and default_ipc_mode options to the exec and java
task drivers. By default these will default to "private" mode, enabling PID and
IPC isolation for tasks. Setting them to "host" mode disables isolation. Doing
so is not recommended, but may be necessary to support legacy job configurations.

Closes #9969