feat: add OSCI gating plan for subscription-manager

Add TMT plan for OSCI-triggered Testing Farm gating. Discovers tests
from rhsm-qe via fmf, uses double-clone pattern for prepare scripts,
and vault-based secrets via rhsm-qe .testing-farm.yaml.

Related: CCT-1831

Assisted-by: goose (AI agent)

.fmf/version

@@ -0,0 +1 @@
+1

gating.yaml

@@ -4,5 +4,5 @@ product_versions:
 decision_context: osci_compose_gate
 rules:
   - !PassingTestCaseRule {test_case_name: osci.brew-build.tier0.functional}
-  - !PassingTestCaseRule {test_case_name: rhsmci.brew-build.tier1.functional}
+  - !PassingTestCaseRule {test_case_name: osci.brew-build./plans/integration.functional}
   - !PassingTestCaseRule {test_case_name: rhsmci.brew-build.cloud.functional}

plans/integration.fmf

@@ -0,0 +1,62 @@
+summary: subscription-manager integration tests (OSCI gating)
+description: |
+    Runs the rhsm-qe TestNG gating suite against a self-managed containerized
+    Candlepin server. Tests are discovered from the rhsm-qe repository.
+
+    Prepare scripts are invoked from a manual clone because TMT does not
+    execute a remote plan's prepare steps when using discover: how: fmf.
+    This is the same pattern used for yggdrasil dist-git gating.
+
+    See also: https://gitlab.cee.redhat.com/RHSM-QE/rhsm-qe/-/blob/main/plans/rhsm.fmf
+
+discover:
+    how: fmf
+    url: https://gitlab.cee.redhat.com/RHSM-QE/rhsm-qe.git
+    ref: main
+
+prepare:
+    - name: Clone rhsm-qe for prepare scripts
+      how: shell
+      script: |
+        git clone --depth=1 -b main https://gitlab.cee.redhat.com/RHSM-QE/rhsm-qe.git /tmp/rhsm-qe
+
+    - name: Install dependencies
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/install-deps.sh
+
+    - name: Setup localhost SSH access
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/setup-localhost-ssh.sh
+
+    - name: Setup rhsm-qe
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/setup-rhsm-qe.sh
+
+    - name: Install subscription-manager
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/install-subscription-manager.sh
+
+    - name: Setup service credentials
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/setup-credentials.sh
+
+    - name: Generate automation.properties
+      how: shell
+      script: /tmp/rhsm-qe/scripts/tmt/generate-properties.sh
+
+    - name: Create test-output directory
+      how: shell
+      script: mkdir -p "${AUTOMATION_DIR}/test-output"
+
+execute:
+    how: tmt
+
+provision:
+    hardware:
+        memory: ">= 8 GB"
+
+environment:
+    AUTOMATION_DIR: ${TMT_PLAN_DATA}/rhsm-qe
+    SERVER_ENVIRONMENT: containerized
+    TESTNG_SUITE: sm-gating-testng-suite.xml
+    GATED: "true"