pipeline 2.6.0 Image-only release; templates unchanged since 2.5.1. ci image: - ship just alongside make (estate repos converging on justfile; consumers can drop per-job dnf installs) - sigstore/cosign 3.x Repo CI: - containers rebuild on MRs that touch their Containerfile