CNF-18558: Integrate rpm lockfile scripts

- Integrate rhel9 lock file generation using RHEL images from the containerfile
    - We do need subscriptions for this as the packages we need are in the rhel9 repos
- Update .gitignore files for the lock directories to account for the new generated and temporary files
- Replace `redhat.repo` configuration with embeded repos in the rpm.in.yaml file for ztp

Assisted-by: Cursor/claude-4-sonnet
AI-attribution: AIA,Primarily human-created,Human-initiated,Reviewed,Cursor/claude-4-sonnet,v1.0
For more information on AI attribution statements, see: https://aiattribution.github.io/

Author: fontivan

.konflux/lock-build/.gitignore

@@ -0,0 +1,4 @@
+Dockerfile
+podman_script.sh
+redhat.repo
+rpms.out.yaml

.konflux/lock-build/redhat.repo

@@ -3,12 +3,94 @@ arches:
   - x86_64
   - aarch64
 contentOrigin:
-  repofiles:
-    # rhel9 rpm repos
-    - ./redhat.repo
+  repos:
+    - repoid: rhel-9-for-x86_64-appstream-rpms
+      name: Red Hat Enterprise Linux 9 for x86_64 - AppStream (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/x86_64/appstream/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
+    - repoid: rhel-9-for-x86_64-baseos-rpms
+      name: Red Hat Enterprise Linux 9 for x86_64 - BaseOS (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/x86_64/baseos/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
+    - repoid: codeready-builder-for-rhel-9-x86_64-rpms
+      name: Red Hat CodeReady Linux Builder for RHEL 9 x86_64 (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/x86_64/codeready-builder/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
+    - repoid: rhel-9-for-aarch64-appstream-rpms
+      name: Red Hat Enterprise Linux 9 for aarch64 - AppStream (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/aarch64/appstream/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
+    - repoid: rhel-9-for-aarch64-baseos-rpms
+      name: Red Hat Enterprise Linux 9 for aarch64 - BaseOS (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/aarch64/baseos/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
+    - repoid: codeready-builder-for-rhel-9-aarch64-rpms
+      name: Red Hat CodeReady Linux Builder for RHEL 9 aarch64 (RPMs)
+      baseurl: https://cdn.redhat.com/content/dist/rhel9/{version}/aarch64/codeready-builder/os
+      enabled: "1"
+      gpgcheck: "1"
+      gpgkey: file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
+      sslverify: "1"
+      sslcacert: /etc/rhsm/ca/redhat-uep.pem
+      sslclientkey: /etc/pki/entitlement/placeholder-key.pem
+      sslclientcert: /etc/pki/entitlement/placeholder.pem
+      sslverifystatus: "1"
+      metadata_expire: "86400"
+      enabled_metadata: "1"
+      varsFromContainerfile: Dockerfile
 context:
   containerfile:
-    file: ../Dockerfile
+    file: Dockerfile
     stageName: build-image
 packages:
   - rust-toolset