Enable hermetic builds, build source image and prefetch, changed url to securesign, update cel expressions #224

Namespace: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured" rel="nofollow">rhtas-tenant
PipelineRun: <a href="https://console.redhat.com/preview/application-pipeline/ns/rhtas-tenant/pipelinerun/client-server-f-on-pull-request-qzwrr" rel="nofollow">client-server-f-on-pull-request-qzwrr

Success

Red Hat Konflux/client-server-f-on-pull-request has successfully validated your commit.

Status	Duration	Name
✅ Succeeded	4 seconds	init
✅ Succeeded	18 seconds	clone-repository
✅ Succeeded	7 seconds	prefetch-dependencies
✅ Succeeded	41 seconds	build-container
✅ Succeeded	29 seconds	clair-scan
✅ Succeeded	22 seconds	sbom-json-check
✅ Succeeded	1 minute	push-dockerfile
✅ Succeeded	1 minute	build-source-image
✅ Succeeded	46 seconds	sast-snyk-check
✅ Succeeded	1 minute	clamav-scan
✅ Succeeded	14 seconds	deprecated-base-image-check
✅ Succeeded	5 seconds	apply-tags
✅ Succeeded	16 seconds	ecosystem-cert-preflight-checks
✅ Succeeded	7 seconds	show-sbom
✅ Succeeded	20 seconds	show-summary