Remove microdnf to reduce CVEs

[siegfriedweber]

Remove microdnf and its dependencies if possible to reduce the number of CVEs.

microdnf is not necessary in the operator and product images and can be removed.

For instance, if the following depencies are removed from the Hive 4.0.0 image

microdnf --assumeyes remove \
    gnupg2 \
    gpgme \
    libarchive \
    libdnf \
    libmodulemd \
    librepo \
    libsolv \
    microdnf \
    openldap \
    rpm \
    rpm-libs

then the following CVEs vanish:

• CVE-2022-3219 (Medium)
• CVE-2023-2953 (High)
• CVE-2023-30571 (Medium)

[nightkr]

Not sure how much I agree, it's not strictly necessary to run our products, but it's also the one escape hatch we have for how barren the image environments are.

[siegfriedweber]

I learned that customers build custom images on top of our images and therefore need microdnf, see e.g. stackabletech/airflow-operator#560. Therefore I am closing this ticket.