Use quay.io/osbuild/koji:v1 and remove db schema generation, now
done in run-koji.cotnainer.sh.
Ensure /mnt/koji has the right permission, but don't create it,
since it is a volume and bind-mounted in.
Support connecting to koji via its fully qualified domain name, i.e.
org.osbuild.koji.koji. For this an extra SSL certificate is needed,
that has the FQDN as the subject, as well as a kerberos principal.
NB: This needs to have a apache VirtualHost section for the FQDN
that uses the new certificate as well.
