osbuild2: set the Insecure option for curl sources

When creating the curl source item for a package, set the Insecure
option on the source to the value of the IgnoreSSL field for the
package.

internal/osbuild2/source.go

@@ -66,6 +66,7 @@ func GenSources(packages []rpmmd.PackageSpec, ostreeCommits []ostree.CommitSourc
 				Name: "org.osbuild.rhsm",
 			}
 		}
+		item.Insecure = pkg.IgnoreSSL
 		curl.Items[pkg.Checksum] = item
 	}
 	if len(curl.Items) > 0 {