ci: fix exit 75 retry by adding explicit retry config to all base templates

GitLab CI does not support exit_codes in the default: keyword (job-level
only). As a result, the exit_codes: [75] in generate-common.php's
default: block was silently ignored, so jobs exiting 75 (e.g. kafka
not ready in wait-for-service-ready.sh) were never retried.

Fix:
- Add retry_on_infra_failure() helper to generate-common.php to
  centralize the retry config (max 2, infra failure conditions,
  exit_codes: [75])
- Apply it to all child pipeline base templates: .base_test (tracer),
  .verify_job (package), .appsec_test (appsec), .tea_test (shared)
- PHP Language Tests explicit retry gains exit_codes: [75] back, which
  it was losing by overriding the default: block

Author: Leiyks

.gitlab/generate-appsec.php

@@ -43,6 +43,7 @@
 .appsec_test:
   tags: [ "arch:${ARCH}" ]
   interruptible: true
+<?php retry_on_infra_failure() ?>
   rules:
     - if: $CI_COMMIT_BRANCH == "master"
       interruptible: false

.gitlab/generate-common.php

@@ -99,6 +99,23 @@ function windows_git_setup_with_packages() {
 <?php
 }
 
+function retry_on_infra_failure() {
+?>
+  retry:
+    max: 2
+    when:
+      - unknown_failure
+      - data_integrity_failure
+      - runner_system_failure
+      - scheduler_failure
+      - api_failure
+      - stuck_or_timeout_failure
+      - job_execution_timeout
+    exit_codes:
+      - 75
+<?php
+}
+
 ?>
 default:
   retry:

.gitlab/generate-package.php

@@ -967,6 +967,7 @@
     DD_AGENT_HOST: request-replayer
     DD_TRACE_AGENT_PORT: 80
     DD_TRACE_AGENT_FLUSH_INTERVAL: 1000
+<?php retry_on_infra_failure() ?>
   script:
     - ./dockerfiles/verify_packages/verify.sh
 

.gitlab/generate-shared.php

@@ -100,6 +100,7 @@
   stage: test
   image: "registry.ddbuild.io/images/mirror/datadog/dd-trace-ci:php-${PHP_MAJOR_MINOR}_bookworm-7"
   interruptible: true
+<?php retry_on_infra_failure() ?>
   rules:
     - if: $CI_COMMIT_BRANCH == "master"
       interruptible: false

.gitlab/generate-tracer.php

@@ -190,6 +190,7 @@ function before_script_steps($with_docker_auth = false) {
   image: registry.ddbuild.io/images/mirror/datadog/dd-trace-ci:php-${PHP_MAJOR_MINOR}_bookworm-7
   timeout: 60m
   interruptible: true
+<?php retry_on_infra_failure() ?>
   rules:
     - if: $CI_COMMIT_BRANCH == "master"
       interruptible: false
@@ -518,6 +519,8 @@ function before_script_steps($with_docker_auth = false) {
       - api_failure
       - stuck_or_timeout_failure
       - job_execution_timeout
+    exit_codes:
+      - 75
   script:
     - make install_all
     - export XFAIL_LIST="dockerfiles/ci/xfail_tests/${PHP_MAJOR_MINOR}.list"