feat: update incus build process

- ensure unkin-ca-certificates are installed
- find the default incus remote and use that for images
- dont set publish_remote_name
- build incus images for the base image
- build puppet-base image for incus only
- ensure builds are made with the `build` profile
- only build 9.5+ for incus
- prevent the build system from building images twice

images/almalinux/8.10/base/variables.auto.pkrvars.hcl

@@ -1,7 +1,6 @@
 # almalinux/8.10/base
 deploy_files_from_image = true
 deploy_files_from_common = true
-use_incus = false
 packages = [
   "git",
   "jq",
@@ -10,6 +9,7 @@ packages = [
   "python3.11-pip",
   "python3.12",
   "python3.12-pip",
+  "unkin-ca-certificates",
   "uv",
   "wget",
 ]