Also add rhel-10.3 and rhel-9.9 to os-image-map.json; the OSCI
gating tests now run against RHEL-10.3-Nightly but the map only
had rhel-10.2, causing provision-packit.sh to fail.
Add patch to mark tmt AVC check as informational; bootc probes
for mac_admin capability via chcon with an intentionally invalid
SELinux label (crates/lib/src/lsm.rs test_install_t), generating
expected AVC denials that the rhel-ci policy's injected AVC check
was flagging as test failures.
Resolves: RHEL-156438
Assisted-by: OpenCode (Claude Opus 4)
