fix(s130): openssl-libs justifications re-pinned to Red Hat's 3.5.8-2 rebuild

[HackTuah]

Red Hat shipped a rebuild of openssl-libs (3.5.8-1.el9_8 to 3.5.8-2.el9_8) today. The image build runs dnf upgrade against the installroot, so it picked the rebuild up, and the image workflow went red on every branch built after it (#126, #123, #124):

FAIL AC3: CVE-2026-75804 (high) in openssl-libs-1:3.5.8-2.el9_8 at pkgdb has no justification row (fix: not-fixed)
FAIL AC3: CVE-2026-84782 (high) in openssl-libs-1:3.5.8-2.el9_8 at pkgdb has no justification row (fix: not-fixed)
FAIL AC4: ... justifies CVE-2026-75804 in openssl-libs-1:3.5.8-1.el9_8 ..., which the scan no longer reports; remove the row
FAIL AC4: ... justifies CVE-2026-84782 in openssl-libs-1:3.5.8-1.el9_8 ..., which the scan no longer reports; remove the row

The scan still reports both as not fixed in the rebuild, and the justification's reasoning is about the image, not the package build: nothing in the image links libssl.so.3, and both flaws are in libssl. So the two rows move to the new build; their text is unchanged, and the comment above them records the re-pin.

Verified: mix test test/mix/tasks/trinity_image_findings_test.exs, 12 passed. The image run on this PR is the real check.

Note for later: because the build upgrades from the live repositories, any Red Hat rebuild of a justified package will do this again. Keying rows on the exact build is deliberate (AC4 catches stale rows), so this is the expected cost, not a defect.