fedora-remote: minimal headless GNOME Remote Desktop host with Kanidm

New image built from upstream base-atomic (no desktop), adding only gnome-shell
+ gdm + gnome-remote-desktop + pipewire/portal + foot + Flatpak + Kanidm.
recommends=false to stay lean. Configures GNOME Remote Desktop headless remote
login on first boot (TLS + credentials + enable). Firefox preinstalled as a
per-user Flatpak. Add it to the CI matrix and prune both images.

.gitea/workflows/build.yaml

@@ -29,6 +29,10 @@ jobs:
             distro: rawhide
             arch: x86_64
             runner: job-v2
+          - image: fedora-remote
+            distro: "44"
+            arch: x86_64
+            runner: job-v2
 
     container:
       image: "quay.io/fedora-ostree-desktops/buildroot:${{ matrix.distro }}"
@@ -141,7 +145,10 @@ jobs:
       - name: Prune old releases
         env:
           RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
-        run: ./prune-releases.sh fedora-cosmic
+        run: |
+          for image in fedora-cosmic fedora-remote; do
+            ./prune-releases.sh "${image}"
+          done
       - name: Prune old registry tags
         env:
           REGISTRY_USERNAME: ${{ secrets.REGISTRY_USERNAME }}
@@ -151,4 +158,6 @@ jobs:
           authfile=/tmp/prune-auth.json
           echo "${REGISTRY_TOKEN}" | skopeo login -u "${REGISTRY_USERNAME}" \
             --password-stdin --authfile "${authfile}" git.plabble.org
-          AUTHFILE="${authfile}" ./prune-registry.sh fedora-cosmic Misthios 44 rawhide
+          for image in fedora-cosmic fedora-remote; do
+            AUTHFILE="${authfile}" ./prune-registry.sh "${image}" Misthios 44 rawhide
+          done