chore: disable downstream lock file gen (#519)

- update the `build.env` settings and delete the stale downstream lock file (`distribution/requirements-lock-konflux.txt`
- add explanatory comments to build.env variables
- regenerate `distribution/requirements-lock.txt`



## Summary by CodeRabbit

* **Chores**
  * Updated bundled dependency versions and integrity hashes.
  * Removed the downstream dependency lock file.
  * Adjusted build configuration to skip downstream lock file generation.




Approved-by: derekhiggins

Approved-by: EleanorWho

Author: mergify[bot]

build/build.env

@@ -1,3 +1,10 @@
+# OGX version to resolve (tag, branch, or commit SHA when installing from source)
 OGX_VERSION=v1.2.1+rhaiv.0
+
+# Resolve `ogx` and `ogx-api` packages from git source (true) or from a package index (false)
+# When true, generates the midstream lock file (requirements-lock.txt)
 OGX_INSTALL_FROM_SOURCE=true
-RHAI_INDEX_URL=https://packages.redhat.com/api/pypi/public-rhai/rhoai/3.5/cpu-ubi9/simple/
+
+# Index URL for downstream lock file generation (requirements-lock-konflux.txt)
+# Leave empty to skip downstream lock file generation
+RHAI_INDEX_URL=