958016: use rpm %{optflags} and _hardended_build

Use our CFLAGS only if not set in the env, so we default
to the CFLAGS rpm sets.
Use systemd RPM macros to make life easier.
Merge pull request #904 from candlepin/awood/systemd

Awood/systemd
851325: Tweak activation key checkbox to left
Merge pull request #907 from candlepin/alikins/851325_register_tooltip

851325: Tweak activation key checkbox to left
1044596: Don't match beta product tags for release

Change the release module to reuse RHELProductMatcher
so it doesn't incorrectly identify content as being
RHEL content, so we don't attempt to find release
listings for them.

Add a rhelproduct.py with some of the RHEL product
specific tag comparisions, and update release
and productid modules to use it.
Merge pull request #905 from candlepin/alikins/1044596_release_rhel_check

1044597: Don't match beta product tags for release
1060727: Changes to rhsm-debug for sos report

Filter out information that is already in the sos report when '--sos' flag is used.
Remove private entitlement keys from collected data.
Merge pull request #902 from candlepin/wottop/1060727

1060727: Changes to rhsm-debug for sos report
Merge pull request #897 from candlepin/alikins/958016_PIE_FORTIFY

958016: use rpm %{optflags} and _hardended_build
864195: New output line for subscribe --auto if it can't cover all products
1035115: Update product id certs

Add support for updating the install product id
certs to newer versions.

productid.py now checks available versions against
installed versions, and compares the certs with
ComparableProductCert and ComparableProduct classes.

Versions newer than installed systems are updated.

Add a "pre_product_id_update" and "post_product_id_update"
plugin slots, and corresponding plugin conduit.

Split installing of new product certs, and updating
old ones so we can have seperate plugins.
wip: add comparable Productid class
Merge pull request #875 from candlepin/alikins/productid_update

1035115: Update product id certs
Merge pull request #908 from candlepin/wottop/864195

864195: New output line for subscribe --auto if it can't cover all produ...
appears the exception is thrown earlier
1038242: add anaconda.pid check before chroot

The yum plugin 'productid.py' has to detect if it is
running in anaconda or not, so that it will place the
productid file in the correct chroot.

Previusly, this just checked for existince of '/mnt/sysimage'
but that can exist outside of anaconda (or in the original
bug, left over by anaconda). So add a check that
'/var/run/anaconda.pid' exists as well.
1055664: rhsm-debug now follows more config paths

The configured values of ca_cert_dir, pluginconfdir are
followed instead of the defaults.
Merge pull request #909 from candlepin/ckozak/fix_unit_test

appears the exception is thrown earlier
Merge pull request #910 from candlepin/alikins/1038242_yum_anaconda

1038242: add anaconda.pid check before chroot
1061407: don't allow some translations