fix(ci): use globs in update-lockfiles workflow for missing konflux lockfile (#522)

## Summary
- The `update-lockfiles` workflow fails with `fatal: pathspec 'distribution/requirements-lock-konflux.txt' did not match any files` because the file was removed from this repo (moved to the downstream fork)
- Switches `git diff`, `git add`, and the PR body file list to use `distribution/requirements-lock*.txt` globs so the workflow handles whichever lockfiles exist
- The workflow now works in both this repo (only `requirements-lock.txt`) and the downstream fork (both lockfiles)

## Test plan
- [ ] Trigger the `update-lockfiles` workflow manually via `workflow_dispatch` and verify it completes without the pathspec error
- [ ] Verify the generated PR body lists the correct lockfile(s)

🤖 Generated with [Claude Code](https://claude.com/claude-code)



## Summary by CodeRabbit

* **Chores**
  * Automated lockfile updates now detect and stage all matching distribution lockfiles.
  * Pull requests created by the workflow now list the specific lockfiles that changed.




Approved-by: derekhiggins

Approved-by: Artemon-line

Author: mergify[bot]

.github/workflows/update-lockfiles.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Check for changes
         id: changes
         run: |
-          if git diff --quiet distribution/requirements-lock.txt distribution/requirements-lock-konflux.txt; then
+          if git diff --quiet -- distribution/requirements-lock*.txt; then
             echo "changed=false" >> "$GITHUB_OUTPUT"
             echo "No lockfile changes detected"
           else
@@ -63,7 +63,7 @@ jobs:
           RELEASE_TOKEN: ${{ secrets.RELEASE_TOKEN }}
         run: |
           git checkout -B "$BRANCH"
-          git add distribution/requirements-lock.txt distribution/requirements-lock-konflux.txt
+          git add -- distribution/requirements-lock*.txt
           git diff --cached --quiet && { echo "No changes to commit"; exit 0; }
           git commit -m "chore: update dependency lockfiles"
           git remote set-url origin "https://x-access-token:${RELEASE_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
@@ -76,6 +76,8 @@ jobs:
         run: |
           PR_URL=$(gh pr list --head "$BRANCH" --state open --json url --jq '.[0].url' 2>/dev/null || echo "")
 
+          FILE_LIST=$(git diff-tree --no-commit-id --name-only -r HEAD -- 'distribution/requirements-lock*.txt' | sed "s|.*|- \`&\`|")
+
           BODY=$(cat <<EOF
           ## Automated lockfile update
 
@@ -86,8 +88,7 @@ jobs:
           This PR regenerates the pinned dependency lockfiles to pick up upstream package changes.
 
           ### Updated files
-          - \`distribution/requirements-lock.txt\`
-          - \`distribution/requirements-lock-konflux.txt\`
+          ${FILE_LIST}
 
           > This PR was auto-generated by the [update-lockfiles workflow](${WORKFLOW_URL}).
           > Review the dependency changes and merge when ready.