The current lint check checks to see if an item has been added to the policy that isn't in the blueprint (such as now requiring package foo to be installed).  It should be adapted to use the saved policy blueprint customization from https://issues.redhat.com/browse/HMS-9059

in addition it should also check if a package was removed from the policy and add a lint check to check for that.

Also 'fixing' the lint checks should now properly remove the item/package if that is the case.

Summary:

• item added check should use saved compliance blueprint customization
• item removed check should be added to use the saved blueprint
• 'fix' api should handle item removed warnings
• 'fixing' should save the new policy blueprint customization

https://github.com/osbuild/image-builder-crc/blob/84b51750426dc6a9d6f73239e55c55809bc90323/internal/v1/handler_oscap.go#L196-L330