ci: sign all image builds

[arthurus-rex]

This builds on previous commit 9d567e5 to add cryptographic signing to two additional workflows: image_pr.yml and image_base.yml. This resolves the issue with images only being intermittently signed. It also reduces the scope of privileges on image.yml to only what is necessary for the OIDC token to be used.

[github-actions]

🤖 SeineSailor

Here is a concise summary of the pull request changes:

Error Handling and Code Consistency: Replaced hardcoded error strings with a variable, improved error handling, and updated the creation of error variables. Modified the ComponentModelWeights.String() function to return a formatted string.

Code Organization and Maintainability: Renamed variables to follow a consistent naming convention, introduced helper functions, and updated Go dependencies to improve project security and maintainability.

Image Security and Compression: Introduced cryptographic signing to two additional workflows, reduced privileges in the image.yml workflow, and modified eBPF code, bash script, and Go code to accommodate these changes. Improved compression format implementation, added new functions and interfaces, and introduced changes to the huff0 and snapref packages.

Build and Deployment: Introduced a new build package, modified the AppConfig struct, and updated the main function to use newAppConfig(). Replaced versioning-related variables with build.Version, build.Branch, etc.

Observations and Suggestions:

• The pull request includes a wide range of changes, which may make it difficult to review and test thoroughly. It's recommended to break down the changes into smaller, more focused pull requests in the future.
• The introduction of cryptographic signing and compression improvements will enhance image security and project maintainability.
• The changes to the build package and AppConfig struct may affect the external interface and behavior of the code, so thorough testing is recommended to ensure no regressions.
• The consistent naming convention and code organization improvements will make the codebase more maintainable and easier to understand.

[arthurus-rex]

I can see that one of the integration tests here failed, but at a glance, it doesn't seem to me like this failure is related to the changes I've applied to this PR. If it is, then I will gladly make any necessary changes.

[rootfs]

CI failure potentially addressed in #1686

[arthurus-rex]

Got it. I will incorporate changes once fix is finalized.

[rootfs]

@arthurus-rex can you rebase to pick up the CI fix?

[arthurus-rex]

Successfully rebased!