RFE: for the next vagrant boxes, keep the updates repo activated

[fcami]

logs show that the freeipa rpms were built against a (very recent) SELinux policy RPM version that does not seem to be available on the vagrant boxes used by master/replica/clients.

This smells like a mock configuration in the builder with the updates repository active, wihle the boxes themselves would have that repository disabled.

A temporary fix is probably to set "update_packages: True" in the PR-CI jobs, but the real fix is to have both mock and actual dnf configuration in sync. I would vote for having updates enabled on both sides.

[fcami]

Update: this passed re-running. Maybe a Fedora mirror is/was not updated last night?
@netoarmando if that's the case, the only remaining AI is to make sure the mock config and the dnf config match, as we discussed earlier.