SWATCH-4975: Create Konflux Pipeline for hermetic frontend build

[Sgitario]

What's included

Starting May 13, the frontend will need to be build with the Nexus registry in order to be released. Or a prodsec-approvaed policy exception will be required.

There is already a Dockerfile.hermetic in the build-tools submodule.  And a README-hermetic-build.md. We need to create a pipeline that uses the Dockerfile.hermetic instead of the Dockerfile.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.18%. Comparing base (5fc166c) to head (a16cfa9).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1863   +/-   ##
=======================================
  Coverage   91.18%   91.18%           
=======================================
  Files         126      126           
  Lines        5198     5198           
  Branches     2405     2405           
=======================================
  Hits         4740     4740           
  Misses        422      422           
  Partials       36       36           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 5fc166c...a16cfa9. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[Sgitario]

In draft, until the ephemeral deployment gets fixed to support hermetic builds.