The el8 spec uses %setup, and autopatch adds explicit %patch lines.
Switching to %autosetup caused patches to be applied twice (once by
autosetup, once by the explicit %patch lines). Keep %setup so patches
are only applied via autopatch's %patch lines.
Switch from a single large patch to add-almalinux8-support.sh script
and 4 smaller patches for maintainability. The script handles all sed/find
debranding operations while patches cover complex multi-file changes
(GPG key test, OS detection, Ansible whitelist, DISA delta cmake).