Add ITS policy config for early release-violation visibility

[joejstuart]

Summary

• Adds a new redhat-its/ policy config that simulates release-time Conforma evaluation during Integration Tests
• Sets pipeline_intention: release to unlock OLM rules (unpinned_snapshot_references, unpinned_related_images, inaccessible_related_images, unmapped_references)
• Excludes the schedule and quay_expiration packages since they enforce release-only constraints that would always fail in ITS

Test plan

• Verify ec validate image works against this config with a test image
• Confirm OLM rules are evaluated (pipeline_intention=release takes effect)
• Confirm schedule and quay_expiration rules are skipped

Ref: EC-1904

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: 8777231c-0ccc-4d71-aaf7-621d4e676f3c

📥 Commits

Reviewing files that changed from the base of the PR and between 6dd06b7 and b6b454e.

📒 Files selected for processing (1)

• redhat-its/policy.yaml

🚧 Files skipped from review as they are similar to previous changes (1)

• redhat-its/policy.yaml

---

📝 Walkthrough

Walkthrough

Adds a Red Hat ITS Conforma policy that simulates release-time evaluation, loads base and release policy sources, includes Red Hat rules, and excludes the quay_expiration and schedule packages.

Changes

Red Hat ITS policy

Layer / File(s)	Summary
Policy definition and sources redhat-its/policy.yaml	Defines ITS policy metadata, sets pipeline_intention to release, configures policy and external data sources, includes @redhat, and excludes quay_expiration and schedule.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding an ITS policy config for earlier visibility of release violations.
Description check	✅ Passed	The description matches the PR and explains the new ITS policy config, its release-intention setting, and excluded packages.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[st3penta]

looks good, i just left a non-blocking comment about the effective date