Now that https://quay.io/repository/konflux-ci/hermeto?tab=tags&tag=latest publishes arm images, we can now also update https://github.com/redhat-developer/rhdh/blob/main/.github/workflows/next-build-image.yaml to become hermetic. 

We need to ensure the AMD64 image is published as soon as it's built since that is what we test with. 

Also make sure that the updates to the `rpms.lock.yaml` using https://github.com/konflux-ci/rpm-lockfile-prototype (you will need to provide an `–arch` argument with `x86_64` and `aarch64`) do not break the downstream builds.

Once the next build is migrated, we should also remove the old upstream Dockerfile and replace it with the new hermetic downstream Dockerfile (rename it to Containerfile). This will require some small modifications to the downstream pipelines to point to the new Containerfile location.