fedostree/products: Reenable SELinux, but in permissive mode

Still some more fixes coming, but getting close.
fedostree: Use generic-release

We're a remix due to unpackaged software, so we can't use
fedora-release.