fedora-cosmic: drop hardware/VM packages not needed on the target host

Trim NVIDIA, Intel GPU/audio/platform, other wireless vendors and VM guest
packages from the cloned upstream manifests, and block linux-firmware's
recommends of them via a generated exclude list. Keeps amd-gpu-firmware,
amd-ucode-firmware, iwlwifi-mvm-firmware (AX200) and alsa-sof-firmware.

images/fedora-cosmic/manifest.yaml

@@ -25,3 +25,5 @@ repos:
 include:
   - cosmic-atomic.yaml
   - custom.yaml
+  # Generated by build.sh from upstream-exclude.txt (exclude-packages list).
+  - hardware-exclude.yaml

images/fedora-cosmic/upstream-exclude.txt

@@ -0,0 +1,49 @@
+# Packages removed from the cloned upstream manifests at build time.
+#
+# rpm-ostree treats excluding a package that an included manifest declares as a
+# fatal error, so build.sh strips these lines from the upstream package
+# manifests before composing.
+#
+# Target machine: GMKtec NucBox M7
+#   - AMD Ryzen 7 PRO 6850H (Radeon 680M iGPU)   -> amd-gpu-firmware kept
+#   - 2x Intel I226-V Ethernet                    -> kernel driver, no fw pkg
+#   - Intel Wi-Fi 6 AX200                         -> iwlwifi-mvm-firmware kept
+#   - AMD audio (SOF)                             -> alsa-sof-firmware kept
+# No NVIDIA, no Intel GPU/audio, no other wireless vendors, bare metal (no VMs).
+
+# NVIDIA
+nvidia-gpu-firmware
+
+# Intel GPU / platform / audio (Intel wireless firmware is kept below)
+intel-gpu-firmware
+intel-audio-firmware
+intel-lpmd
+intel-vsc-firmware
+libva-intel-media-driver
+
+# Intel-only CPU tooling (AMD uses amd-ucode-firmware)
+microcode_ctl
+thermald
+
+# Wireless firmware for hardware that is not present
+atheros-firmware
+brcmfmac-firmware
+libertas-firmware
+mt7xxx-firmware
+nxpwireless-firmware
+qcom-wwan-firmware
+realtek-firmware
+tiwilink-firmware
+iwlwifi-dvm-firmware
+iwlegacy-firmware
+
+# Audio firmware for other vendors
+cirrus-audio-firmware
+
+# Virtual machine guest agents / drivers
+hyperv-daemons
+open-vm-tools-desktop
+qemu-guest-agent
+spice-vdagent
+spice-webdavd
+virtualbox-guest-additions