Scaling GitHub Actions at Cisco with Ephemeral Runners and Tenant Isolation