Add new recipes and update build pipeline

- Split common-modules into base.yml and gui.yml
- Rename and consolidate old recipe_gnome* files into bazzite-gnome.yml;
  move firmware
  path
- Add new build recipe ucore-hci.yml
- Update GitHub Actions: schedule to 18:00 UTC, add concurrency, bump
  blue-build action to v1.11 and switch matrix recipes
- Update docker-ce repo URLs to Fedora 43
- Rotate cosign public key

.github/workflows/build.yml

@@ -1,14 +1,18 @@
 name: bluebuild
 on:
   schedule:
-    - cron: "00 07 * * *" # build at 07:00 UTC every day 
-                          # (1:20 hours after last ublue images start building)
+    - cron:
+        "00 18 * * *" # build at 18:00 UTC every day
+        # (12 hours after last ublue images start building)
   push:
-    paths-ignore: # don't rebuild if only documentation has changed
+    paths-ignore:
       - "**.md"
 
   pull_request:
-  workflow_dispatch: # allow manually triggering builds
+  workflow_dispatch:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref || github.run_id }}
+  cancel-in-progress: true
 jobs:
   bluebuild:
     name: Build Custom Image
@@ -18,20 +22,17 @@ jobs:
       packages: write
       id-token: write
     strategy:
-      fail-fast: false # stop GH from cancelling all matrix builds if one fails
+      fail-fast: false
       matrix:
         recipe:
-          - recipe_gnome.yml
-          - recipe_gnome-nvidia-open.yml
+          - bazzite-gnome.yml
+          - ucore-hci.yml
     steps:
-       # the build is fully handled by the reusable github action
       - name: Build Custom Image
-        uses: blue-build/github-action@v1.8
+        uses: blue-build/github-action@v1.11
         with:
           recipe: ${{ matrix.recipe }}
           cosign_private_key: ${{ secrets.SIGNING_SECRET }}
           registry_token: ${{ github.token }}
           pr_event_number: ${{ github.event.number }}
-
-          # enabled by default, disable if your image is small and you want faster builds      
           maximize_build_space: true