Reapply "manifests: enable cliwrap on Fedora 40+"

This reverts commit 3789b06.

The reported issue that motivated the revert[[1]] is due to an
rpm-ostree bug[[2]].

We can trivially work around this bug until the rpm-ostree fix lands in
FCOS, so let's do that and re-enable cliwrap.

[1]: coreos/fedora-coreos-tracker#1679
[2]: coreos/rpm-ostree#4848

manifests/cliwrap.yaml

@@ -0,0 +1,2 @@
+# https://github.com/coreos/fedora-coreos-tracker/issues/730
+cliwrap: true

manifests/fedora-coreos.yaml

@@ -36,6 +36,8 @@ conditional-include:
   - if: releasever == 39
     # Checks for breaking changes that came with Podman v5.
     include: podman-v5.yaml
+  - if: releasever >= 40
+    include: cliwrap.yaml
 
 ostree-layers:
   - overlay/15fcos

tests/kola/extensions/package

@@ -52,3 +52,9 @@ if [[ -n "${failed}" ]]; then
   fatal "could not install: ${failed}"
 fi
 ok "successfully installed os rpm package extensions"
+
+# also try the wrapped dnf
+if jq -e .cliwrap /usr/share/rpm-ostree/treefile.json; then
+  dnf install -y 'ltrace'
+  ok "dnf cliwrap"
+fi

tests/kola/rpm-ostree/kernel-replace

@@ -87,7 +87,8 @@ case "${AUTOPKGTEST_REBOOT_MARK:-}" in
     version=$(rpm-ostree --version | grep Version)
 cat > Dockerfile << EOF
 FROM localhost/fcos
-RUN rpm-ostree cliwrap install-to-root /
+# until we have https://github.com/coreos/rpm-ostree/pull/4848
+RUN if test ! -d /usr/libexec/rpm-ostree/wrapped; then rpm-ostree cliwrap install-to-root /; fi
 RUN rpm-ostree override replace \
     https://koji.fedoraproject.org/koji/buildinfo?buildID=2178613 && \
     ostree container commit