Pin provider-pack producer Node to the image version

Co-Authored-By: Paperclip <noreply@paperclip.ing>

scripts/check-node-version-policy.mjs

@@ -40,7 +40,15 @@ const workflowRoot = path.join(repoRoot, ".github", "workflows");
 walk(workflowRoot, (filePath) => {
   if (!/\.ya?ml$/.test(filePath)) return;
   const source = fs.readFileSync(filePath, "utf8");
+  // Release packs ship the interpreter itself, so their producer must match
+  // the image's exact Node patch. Other CI jobs continue tracking Node 24.
+  const packProducer = relative(filePath) === ".github/workflows/release-verify.yml"
+    ? /(?:^|\n)  runner_binaries:\n[\s\S]*?(?=\n  [a-z_]+:\n|$)/.exec(source)
+    : null;
   for (const match of source.matchAll(/node-version:\s*["']?([^\s"'#]+)/g)) {
+    if (match[1] === "24.21.0" && packProducer
+      && match.index >= packProducer.index
+      && match.index < packProducer.index + packProducer[0].length) continue;
     if (match[1] !== "24") failures.push(`${relative(filePath)}: node-version must be 24, found ${match[1]}`);
   }
 });