Use the standard object_to_authorze before filter and the pundit
policy instead of re-inventing it.

Instead of re-inventing set_project/repository/architecture.

We don't use VCR anymore for this spec

There are a lot of specs testing various "standard" before filters that are
already tested elsewhere. Like multibuild, weird project names, Project/Package
not existing etc.

Both controller actions also use the same before filter chain. There is no need
to test the same thing twice.

There is also no need for VCR, we can mock build results easily.

This is going to see more wide spread use...

[backend] improve slsa provenance v1 data

Add flags to capture preinstall/vminstall settings.
Use 'sysroot' as intent for sysroot packages.

[backend] container publishing: add container tag deletion safeguard …

This can be used to abort the container publishing if tags would be removed from
the registry.

Merge pull request #16412 from danidoni/fix-invalid-byte-sequence-in-utf-8-when-processing-build-logs

Fix invalid byte sequence in UTF-8 processing build logs

Don't set unread notifications count on AJAX requests

[src/api] Update rexml 3.3.0 → 3.3.1 (patch)

Sometimes we get build logs in UTF-8 with invalid byte sequences. We
need to be able to process them without failing.

This PR removes the invalid byte sequences

Fixes #16411

In cases like AJAX queries for build results or RPM lint results, we
don't need to set the unread notifications counter.

Filter workflow runs by event source

[backend] implement container and rpm aggregate testing

We will need them in other testcases

Bugfix: reuse already computed range dates

Workflow run notifications

Refactoring Packages::MainController away

Bugfix: add missing details information for request build result badge

Prevent from performing N+1 queries on Workflow run row component

Preload projects on polymorphic commentable

Simplify Package/Project source_access policy

BugFix: notification count for unread only

Less layers of indirection (can_source_access -> can -> has_local_permission)
and less duplication (has_local_permission already checks the Project of a Package)

No need for a whole controller just for set_architecture..

... run row component