When we switched from scratch to ubi8-minimal, some required brew metadata was not correctly set.

See thread https://chat.google.com/room/AAAAZrx3KlI/TSlsi2G2rts

Sounds like we need to set

compose:
  inherit: false
  pulp_repos: true
  signing_intent: release

to make Brew not pull unsigned rpms. You'd think that would be the default? Yeah but no.