Expose verified RPM artifact production through a repository Make target. Use Docker only as the Rocky Linux and Oracle Linux toolchain, keep the source worktree read-only and support the selected UEK package layouts.