[management] Add a release-wired UBI image variant (#8167)

* [management] Add a release-wired UBI image variant

OpenShift and other Red Hat environments expect UBI-based images that run
as an arbitrary non-root UID. The proxy, combined server and rootless
client already ship -ubi variants; this adds the same for management,
published as <version>-ubi and ubi-latest for amd64 and arm64.

The default --port of 80 cannot bind without root, so the image defaults
to 8080. For Let's Encrypt, public 443 forwards to --port and
--letsencrypt-listen-address is empty (#7706), so the main listener
answers the TLS-ALPN challenges.

* [management] Certify the management UBI image

Adds management to the Red Hat certification components. Its Partner
Connect component ID goes in the REDHAT_CERT_ID_MANAGEMENT repository
variable.

.github/workflows/redhat-certify.yml

@@ -33,6 +33,7 @@ on:
           - client-rootless
           - reverse-proxy
           - netbird-server
+          - management
           - signal
           - relay
       version:
@@ -70,6 +71,7 @@ jobs:
             "client-rootless ghcr.io/netbirdio/netbird -rootless-ubi"
             "reverse-proxy ghcr.io/netbirdio/reverse-proxy -ubi"
             "netbird-server ghcr.io/netbirdio/netbird-server -ubi"
+            "management ghcr.io/netbirdio/management -ubi"
             "signal ghcr.io/netbirdio/signal -ubi"
             "relay ghcr.io/netbirdio/relay -ubi"
           )