cloudapi: Add module_hotfixes flag

[ezr-ondrej]

Allow passing module_hotfixes flag through the cloudapi. This will enable depsolving on repositories that might be affected by modularity filtering.

Refs HMS-3202

Needs osbuild/images#284 to have this flag on all the repositories.
⚠️ currently this includes osbuild/images bump, which we want to wait for the release I'm guessing, but apart of that, this is ready for review :)

[thozza]

You can use images v0.22.0 -> https://github.com/osbuild/images/releases/tag/v0.22.0

[thozza]

I think that it would be good to enable this repo setting also for user-defined sources (repos) on-premise. This means extending:
https://github.com/osbuild/osbuild-composer/blob/main/internal/store/store.go#L59
https://github.com/osbuild/osbuild-composer/blob/main/internal/store/store.go#L622
https://github.com/osbuild/osbuild-composer/blob/main/internal/weldr/json.go#L138
https://github.com/osbuild/osbuild-composer/blob/main/internal/weldr/json.go#L203

Without this, one won't be able to define 3rd party repos with this option set, which are used for the actual image build. They could only embed repo definitions inside the final image with the option set (this is handled by the BP customization).

[henrywang]

All FIPS tests failure has been fixed by PR #3849. Could you please make a rebase? Thanks.

[henrywang]

All edge-simplified test failure is not caused by this PR. Issue has been fixed by PR #3854

[ezr-ondrej]

@thozza can you check out the vsphere failures if you see something in there? https://gitlab.com/redhat/services/products/image-builder/ci/osbuild-composer/-/pipelines/1109228638 I can't figure out what's the issue.
The good news is we seem to be quite close 😛

[thozza]

LGTM.

The nightly pipeline failures are unrelated to this PR.

[ezr-ondrej]

Thank you for guiding me @thozza ! 👍