chore(deps): update konflux references

[red-hat-konflux]

This PR contains the following updates:

Package	Change
quay.io/konflux-ci/tekton-catalog/task-ecosystem-cert-preflight-checks (source, changelog)	e2bcf11 → 9c30072
quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan (source, changelog)	cfdb76c → d4e3499

---

Configuration

📅 Schedule: Branch creation - Between 05:00 AM and 11:59 PM, only on Saturday ( * 5-23 * * 6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: 3781154a-3418-4976-acb1-ac4489baca44

📥 Commits

Reviewing files that changed from the base of the PR and between 5caad7e and 1bd5680.

📒 Files selected for processing (2)

• .tekton/bonfire-pull-request.yaml
• .tekton/bonfire-push.yaml

---

Summary by CodeRabbit

• Chores
  • Updated CI/CD pipeline task bundle references for scanning and validation processes.

Walkthrough

This PR updates Tekton bundle SHA256 digests for three security and scan tasks across two workflow configurations. The rpms-signature-scan task digest is updated in both pull-request and push pipelines, while ecosystem-cert-preflight-checks is updated only in the pull-request pipeline. Task names, versions, and wiring remain unchanged.

Changes

Tekton Task Bundle Digest Updates

Layer / File(s)	Summary
Pull-request pipeline task digests .tekton/bonfire-pull-request.yaml	Bundle SHA256 digests are updated for rpms-signature-scan and ecosystem-cert-preflight-checks tasks in the pull-request pipeline while keeping task names and versions unchanged.
Push pipeline task digest .tekton/bonfire-push.yaml	Bundle SHA256 digest is updated for rpms-signature-scan task in the push pipeline while keeping the task name and version unchanged.

---

🎯 1 (Trivial) | ⏱️ ~5 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and concisely describes the main change—updating dependency references to konflux components in Tekton configuration files.
Description check	✅ Passed	The description is directly related to the changeset, providing a detailed table of dependency updates with source links and commit hashes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/references/master

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}