This epic is about taking the Konflux tasks (and pipelines) we have already created (build and release) and make them trusted by Konflux.

For the build tasks, we can leverage the recently accepted decentralized trusted tasks model. The tasks can continue to reside in our git repos, but we'll need to "release" them through Konflux, and make sure we're using the "released" reference in our build pipeline. The build pipeline itself does not need to be trusted, just the tasks within it.

For the release tasks, we must work with Konflux's release team to have them moved to the release-service-catalog. We also need to move our release pipeline definition there.

Many tasks have been removed from the build and release pipelines to make things work. We need to ensure these are covered somehow. We'll likely need to consult prod sec on this.