Remove 'x86/kaslr: Expose and use the end of the physical memory address
space' due to having been backported by Red Hat in  5.14.0-503.31.1.el9_5.

Leaving the 'selftest/mm temporary fix of hmm infinite loop' there is no
other way to test the HMM implications for the x86/kaslr changes and is
only shipped in the selftests.

[sig-cloud-9] 5.14.0-503.19.1.el9_5 update Carried Patches

See merge request !20

The RESF 9.5 base included some additional contextual information around
the pathes in question. This fixes up a merge conflict and rebases the
patches to be against the latest code.  Minor changes with these due
cherry-picking them from the 9.4 fork of SIG/CLOUD.

Remove Un Needed Patch

Add Temporary Fix for HMM testing

See merge request !19

This is so if anyone builds the kernel locally they can successfully run
the HMM part of tools/testing/selftest/mm/run_vmtests.sh -t hmm without
the test failing and causing an infinite loop.

Update Optimized patches for latest RESF release

See merge request !18

This was removed from patches as its included in the new RESF 9.4 update
* locking/atomic: Make test_and_*_bit() ordered on failure

Readd missing sev-snp patches

See merge request !16

Some of the patches where included in Rocky9 but the one that RHEL did
not back port is related to the NX bit which they appear to not be
concerned about.

Rebase for Rocky9.4 and Requested patch

See merge request !15

All removed backported patches were already included in Rocky9.4.
To reduce builds we're also including the a Hyperscaler request for a
backported fix.

Removed patch for enabling IDPF as its already done on all configs
- redhat/configs: enable CONFIG_IDPF=m (Michal Schmidt) [RHEL-15651]

Reseting Release for Rocky9.4

R9 idpfv1 and sev snp

See merge request !10

fix certs for arm signing

See merge request !9

bump release for shim 15.8 rebuild

See merge request !6

fix: ensure kernel is signed with the right key

See merge request !3

Before 9.3/8.9 we introduced a change to the signing methodology to
support multiple types of keys in a single kernel. i.e., we now support
different keys for different artifacts (uki, 64k, etc). This change
modifies the upstream spec to pin us to the sigcloud kernel certificate
to sign with, and provides information for the sbsigntools macros to
process the calls to %pesign properly.

Additionally, we are not building a UKI kernel at this time for
SIG/Cloud.

fix quoting

See merge request !2

fixup for 9.3

See merge request !1