[improvement] set NOFILE limits for containerd and systemd

[rosskirkpat]

What this PR does / why we need it:

• increase default NOFILE limits for systemd services.
  • containerd set to infinite
  • all services increased to 65535

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Special notes for your reviewer:

TODOs:

• squashed commits
• includes documentation
• adds unit tests
• adds or updates e2e tests

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.18%. Comparing base (6608cb3) to head (46fae72).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #812   +/-   ##
=======================================
  Coverage   63.18%   63.18%           
=======================================
  Files          71       71           
  Lines        7356     7356           
=======================================
  Hits         4648     4648           
  Misses       2435     2435           
  Partials      273      273           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull Request Overview

This PR configures NOFILE (file descriptor) limits for systemd services to support high-performance containerized workloads. The changes set containerd's NOFILE limit to infinity and establish default NOFILE limits of 65535 (soft) and 1048576 (hard) for all systemd services.

• Sets infinite NOFILE limit for containerd service to handle high file descriptor usage
• Configures system-wide default NOFILE limits via systemd configuration
• Improves error handling and shell script best practices throughout the setup script