[aap_containerized] Refactor plugin to use container-helper APIs

[snagoor]

Fixes #4449

Summary

Replaces all manual su - <user> -c 'podman ...' shell constructions in the aap_containerized plugin with the typed runtime helpers introduced in feature/container-helpers.

Changes

Container discovery

• _get_aap_container_names() now delegates to get_containers_by_user(username, get_all=True) instead of shelling out to podman ps --format {{.Names}}.

Log collection

• New log_lines plugin option (default 1000). add_podman_logs() passes it to add_container_logs(..., runas=username, log_lines=N); --all-logs sets it to None (unbounded) as expected.

Inspect and exec

• add_podman_inspect() and add_podman_exec() wrap _runtime.inspect_command() and _runtime.exec_command() with runas=username, replacing the manual podman inspect / podman exec -it ... bash -c "..." shell strings.

Runtime info commands

• setup() calls _runtime.info_command(run_debug=True) and _runtime.list_command(get_all=True) instead of hardcoded podman info --debug / podman ps -a --format json strings.

Username and directory resolution

• Extracted _get_username(): prefers the plugin option; falls back to scanning ps -eo user,args for a single user running a rootless podman instance.
• Extracted _get_aap_directory(): prefers the plugin option; falls back to ~<username>/aap with a warning log.

Forbidden paths

• Added controller/data to cover the entire data directory.
• Removed individual SECRET_KEY file exclusions (subsumed by the above).

Test plan

• No username option — auto-detection logs a warning and identifies the correct user from the process list.
• Explicit -k aap_containerized.username=<user> — inspect, exec, and log output appear under their respective subdirectories (aap_container_logs/, podman_inspect_logs/, podman_cmd_outputs/<container>/).
• --all-logs — log collection is unbounded (no --tail flag).
• -k aap_containerized.log_lines=500 — logs are tailed to 500 lines per container.
• controller/data and eda/etc/*.cert are excluded from the archive.

Assisted-by: Claude Code

[packit-as-a-service]

Congratulations! One of the builds has completed. 🍾

You can install the built RPMs by following these steps:

• sudo dnf install -y 'dnf*-command(copr)'
• dnf copr enable packit/sosreport-sos-4450
• And now you can install the packages.

Please note that the RPMs should be used only in a testing environment.

[snagoor]

This PR depends on #4446

[pmoravec]

pylint raises error here due to missing get_containers_by_user method - that is fine, since this PR relies on the other one that adds the method.

[snagoor]

Yes, once the PR #4446 is merged, I will rebase it so the pylint can run without any errors.

[pmoravec]

we might add an explanation for skipping the obfuscation, but thta is rather a nitpick.

[snagoor]

Done. Added explanation.