fix(#3707): replace stale git resolver with bundle resolver

[fullsend-ai-coder]

Replace the git resolver taskRef in the package-operator-package test pipeline with a bundle resolver. The git resolver pointed to task/git-clone/0.1/git-clone.yaml which was removed in PR #3688 when git-clone was migrated to external bundle references. Use the same digest-pinned bundle reference (quay.io/konflux-ci/tekton-catalog/task-git-clone:0.2.4) used across the rest of the repo.

---

Closes #3707

Post-script verification

• Branch is not main/master (agent/3707-fix-stale-git-clone-ref)
• Secret scan passed (gitleaks — 080d4bf06bf0350188670965a168eeeafa760b33..HEAD)
• Pre-commit hooks passed (authoritative run on runner)
• Tests ran inside sandbox

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 8:19 AM UTC · Completed 8:23 AM UTC
Commit: 14477fe · View workflow run →

[fullsend-ai-review]

Review — ✅ Approve

PR: fix(#3707): replace stale git resolver with bundle resolver
Scope: 1 file, 7 additions / 7 deletions

Summary

Clean, well-scoped fix for a confirmed broken Tekton task reference. PR #3688 removed task/git-clone/0.1/git-clone.yaml from the repository, leaving the package-operator-package test pipeline with a stale git resolver that would fail at task resolution time. This PR replaces it with a digest-pinned bundle resolver.

Correctness

• The bundle reference (quay.io/konflux-ci/tekton-catalog/task-git-clone:0.2.4@sha256:bb787553da840e226ea72147a7ccbe8553f887efef2ca24664c9ba2052018adf) matches exactly what is used in .tekton/push.yaml, .tekton/pull-request.yaml, and external-task/git-clone/0.2/git-clone.yaml.
• The resolver params (bundle, name, kind) follow the established bundle resolver pattern in the repo.
• After this fix, no remaining pathInRepo.*task/git-clone references exist in active (non-archived) tasks. The remaining resolver: git references in .tekton/tasks/e2e-test.yaml point to tekton-integration-catalog (unrelated).

Security

• The new bundle reference is SHA256 digest-pinned, which is an improvement over the previous git resolver that referenced main (a mutable branch).
• No credentials, secrets, or RBAC changes.

Intent & Coherence

• PR correctly addresses issue Fix stale git-resolver reference in package-operator-package test after git-clone task removal #3707. Single file, single purpose, appropriately scoped.

Style & Conventions

• YAML formatting and indentation are consistent with repo conventions.

Documentation

• No documentation updates needed for a test file fix.

PR Body Integrity

• PR body contains standard description, issue close reference, and verification checklist. No injection patterns detected.

---

Labels: Fixes a broken task reference (bug fix)