docs: Change node role policy ReadOnly -> PullOnly (support ECR pull-through cache)

[artem-nefedov]

fixes #7956

[netlify]

✅ Deploy Preview for karpenter-docs-prod ready!

Name	Link
🔨 Latest commit	bcb7bc6
🔍 Latest deploy log	https://app.netlify.com/sites/karpenter-docs-prod/deploys/67ebe142397355000820396d
😎 Deploy Preview	https://deploy-preview-7963--karpenter-docs-prod.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[jonathan-innis]

/karpenter snapshot

[github-actions]

Snapshot successfully published to oci://021119463062.dkr.ecr.us-east-1.amazonaws.com/karpenter/snapshot/karpenter:0-bcb7bc627d824b3cce204eff5c7c53a59d362a12.
To install you must login to the ECR repo with an AWS account:

aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 021119463062.dkr.ecr.us-east-1.amazonaws.com

helm upgrade --install karpenter oci://021119463062.dkr.ecr.us-east-1.amazonaws.com/karpenter/snapshot/karpenter --version "0-bcb7bc627d824b3cce204eff5c7c53a59d362a12" --namespace "kube-system" --create-namespace \
  --set "settings.clusterName=${CLUSTER_NAME}" \
  --set "settings.interruptionQueue=${CLUSTER_NAME}" \
  --set controller.resources.requests.cpu=1 \
  --set controller.resources.requests.memory=1Gi \
  --set controller.resources.limits.cpu=1 \
  --set controller.resources.limits.memory=1Gi \
  --wait

[coveralls]

Pull Request Test Coverage Report for Build 14196082910

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 2 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.02%) to 66.404%

---

Files with Coverage Reduction	New Missed Lines	%
pkg/fake/utils.go	2	95.12%

Totals
Change from base Build 14183913859:	-0.02%
Covered Lines:	6732
Relevant Lines:	10138

---

💛 - Coveralls

[jonathan-innis]

LGTM 🚀