Update config for c10 spec: use system-sb-certs instead of bundled certs

The c10 spec no longer bundles Red Hat cert files as Source300-503.
It uses system-sb-certs with sb_ca/sb_cer/sb_key macros and
CentOS/RHEL conditionals. Update actions to replace the conditionals
with AlmaLinux values and remove bundled cert files.

config.yaml

@@ -3,29 +3,6 @@ actions:
     - suffix: ".alma.1"
       enabled: true
 
-  - add_files:
-      - type: "source"
-        name: "almalinuxsecurebootca0.cer"
-        number: 300
-      - type: "source"
-        name: "almalinuxsecureboot0.cer"
-        number: 301
-
-  - delete_files:
-      - file_name: "redhatsecurebootca3.cer"
-      - file_name: "redhatsecureboot301.cer"
-      - file_name: "redhatsecurebootca5.cer"
-      - file_name: "redhatsecureboot503.cer"
-  
-  - delete_line:
-    - target: "spec"
-      lines: 
-      - |
-            Source300:   redhatsecurebootca3.cer
-            Source301:   redhatsecureboot301.cer
-            Source500:   redhatsecurebootca5.cer
-            Source503:   redhatsecureboot503.cer
-
   - replace:
       - target: "spec"
         find: "%global debug_package %{nil}"
@@ -33,27 +10,34 @@ actions:
               %global efi_vendor almalinux
               %global efidir almalinux
               %global efi_esp_dir /boot/efi/EFI/%{efidir}
-              
+
               %global debug_package %{nil}
         count: 1
       - target: "spec"
         find: |
-          -Defi_sbat_distro_id="fedora" \
-          -Defi_sbat_distro_summary="The Fedora Project" \
+          %if 0%{?centos}
+          %define sb_key		centossecureboot202
+          %else
+          %define sb_key		redhatsecureboot802
+          %endif
         replace: |
-          -Defi_sbat_distro_id="almalinux" \
-          -Defi_sbat_distro_summary="AlmaLinux" \
-        count: 1
-      - target: "spec"
-        find: "-Defi_sbat_distro_url=\"https://src.fedoraproject.org/rpms/%{name}\""
-        replace: "-Defi_sbat_distro_url=\"https://git.almalinux.org/rpms/%{name}\""
+          %define sb_key		almalinuxsecureboot0
         count: 1
       - target: "spec"
         find: |
-          %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp -a %{SOURCE300} -c %{SOURCE301} -n redhatsecureboot301
-          %pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed -a %{SOURCE500} -c %{SOURCE503} -n redhatsecureboot503
+          %if 0%{?centos}
+              -Defi_sbat_distro_id="centos" \
+              -Defi_sbat_distro_summary="The Fedora Project" \
+              -Defi_sbat_distro_url="https://www.centos.org/" \
+          %else
+              -Defi_sbat_distro_id="rhel" \
+              -Defi_sbat_distro_summary="Red Hat Enterprise Linux" \
+              -Defi_sbat_distro_url="mailto:secalert@redhat.com" \
+          %endif
         replace: |
-          %pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.signed -a %{SOURCE300} -c %{SOURCE301} -n almalinuxsecureboot0
+              -Defi_sbat_distro_id="almalinux" \
+              -Defi_sbat_distro_summary="AlmaLinux" \
+              -Defi_sbat_distro_url="https://git.almalinux.org/rpms/%{name}" \
         count: 1
 
   - changelog_entry: