Removed two obsolete `replace` actions targeting the static `%define pesign_name_0` and `UKI_secureboot_name` blocks that upstream eliminated in favour of dynamic cert-name discovery.
Updated the UKI secureboot find string in config.yaml from `centossecureboot204` to `centossecureboot804` to match the renamed certificate in the upstream spec.
Updated the `find` string in the `pesign_name_0` replace action to match the new CentOS secure-boot cert name `centossecureboot801` (was `centossecureboot201`).
Updated ReplaceAction find/replace for nvidia cert block and changed almalinuxnvidia1.x509 source number from 107 to 109 to avoid conflict with new upstream Source107 (nvidiajetsonsoc.x509).
- Add riscv64 to ExclusiveArch find/replace to match updated spec
- Remove obsolete CONFIG_BTRFS_FS_CHECK_INTEGRITY from BTRFS replace
blocks (option removed in kernel 6.12)
- Keep Red Hat SBAT lines in *.sbat.template replaces and append
AlmaLinux entries instead of replacing
- Delete leftover lpfc patch file
