blueprint: move tar towards lorax parity

The main difference (according to `rpm -qa`) is an additional package
containing a gpg key which was used to verify packages. The one
generated by lorax-composer doesn't have this, because it doesn't verify
signatures.

tools/test_image_info/pipelines/tar_empty_blueprint.json

@@ -43,30 +43,38 @@
             }
           ],
           "packages": [
-            "@Core",
-            "chrony",
-            "kernel",
+            "policycoreutils",
             "selinux-policy-targeted",
-            "grub2-pc",
-            "spice-vdagent",
-            "qemu-guest-agent",
-            "xen-libs",
+            "kernel",
+            "firewalld",
+            "chrony",
             "langpacks-en"
           ],
+          "exclude_packages": [
+            "dracut-config-rescue"
+          ],
           "releasever": "30",
           "basearch": "x86_64"
         }
       },
-      {
-        "name": "org.osbuild.fix-bls",
-        "options": {}
-      },
       {
         "name": "org.osbuild.locale",
         "options": {
           "language": "en_US"
         }
       },
+      {
+        "name": "org.osbuild.grub2",
+        "options": {
+          "root_fs_uuid": "76a22bf4-f153-4541-b6c7-0332c0dfaeac",
+          "boot_fs_uuid": "00000000-0000-0000-0000-000000000000",
+          "kernel_opts": "ro biosdevname=0 net.ifnames=0"
+        }
+      },
+      {
+        "name": "org.osbuild.fix-bls",
+        "options": {}
+      },
       {
         "name": "org.osbuild.selinux",
         "options": {
@@ -77,7 +85,7 @@
     "assembler": {
       "name": "org.osbuild.tar",
       "options": {
-        "filename": "image.tar"
+        "filename": "root.tar.xz"
       }
     }
   }