contrib: Add Containerfile.art and data files for ART onboarding

Include repository-to-cpe.json and container-name-repos-map.json data
files in contrib/art/ for use during container build. ADD https:// fails
in hermetic builds (network unreachable), so use COPY with local files
instead to enable both hermetic and open builds without external network
calls.

Signed-off-by: Shruti Anekar <sanekar@redhat.com>

Author: shruti-rh

.dockerignore

@@ -12,6 +12,7 @@ NOTICE
 /book
 /contrib
 !/contrib/cmd
+!/contrib/art
 /Documenatation
 /etc
 /local-dev

CODEOWNERS

@@ -1 +1,2 @@
-*	@quay/clair
+*	@quay/clair @quay/clair-maintainers
+contrib/art/*	@quay/automated-release-tooling

contrib/art/Containerfile.art

@@ -0,0 +1,41 @@
+FROM registry.redhat.io/ubi9/go-toolset:1.25 AS build
+
+WORKDIR /app
+COPY . .
+
+RUN GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -mod=mod \
+	-ldflags="-s -w" \
+	-o . \
+	-trimpath \
+	./cmd/...
+
+FROM registry.redhat.io/ubi9/ubi-minimal:latest
+
+LABEL com.redhat.component="clair-container"
+LABEL name="quay/clair-rhel9"
+LABEL io.k8s.display-name="Red Hat Quay - Clair"
+LABEL io.k8s.description="Clair vulnerability scanner for Red Hat Quay"
+LABEL io.openshift.tags="quay,clair,security"
+LABEL summary="Clair vulnerability scanner for Red Hat Quay"
+LABEL description="Clair vulnerability scanner for Red Hat Quay"
+LABEL cpe="cpe:/a:redhat:quay::el9"
+LABEL vendor="Red Hat, Inc."
+LABEL distribution-scope="restricted"
+LABEL url="https://docs.redhat.com/en/documentation/red_hat_quay"
+LABEL maintainer="support@redhat.com"
+
+ENTRYPOINT ["/usr/bin/clair"]
+VOLUME /config
+EXPOSE 6060
+WORKDIR /run
+
+ENV CLAIR_CONF=/config/config.yaml \
+    CLAIR_MODE=combo \
+    SSL_CERT_DIR="/etc/ssl/certs:/etc/pki/tls/certs:/var/run/certs"
+
+USER nobody:nobody
+
+COPY --from=build /app/clair /bin/clair
+COPY --from=build /app/clairctl /bin/clairctl
+ADD https://www.redhat.com/security/data/metrics/repository-to-cpe.json /data/
+ADD https://www.redhat.com/security/data/metrics/container-name-repos-map.json /data/