Fix Candlepin service failure with Tomcat 9

[jeremylenz]

Why are you introducing these changes? (Problem description, related links)

The candlepin service fails to start on deployments using the nightly candlepin container image. The failure occurs because server.xml references org.apache.catalina.core.OpenSSLLifecycleListener, which is a Tomcat 10.1+ class, but the current nightly candlepin image ships Tomcat 9.0.87.

What are the changes introduced in this pull request?

• Added tasks to query the Tomcat version from the container image at deploy time
• Made the OpenSSLLifecycleListener conditional on Tomcat major version >= 10
• Updated connector comment to be version-agnostic

How to test this pull request

Steps to reproduce:

• Deploy with the nightly candlepin image (which has Tomcat 9)
• Verify candlepin service starts successfully without errors
• Check that server.xml does not include OpenSSLLifecycleListener

Checklist

• Tests added/updated (if applicable)
• Documentation updated (if applicable)

🤖 Generated with Claude Code

[ehelms]

The candlepin service fails to start on deployments using the nightly candlepin container image. The failure occurs because server.xml references org.apache.catalina.core.OpenSSLLifecycleListener, which is a Tomcat 10.1+ class, but the current nightly candlepin image ships Tomcat 9.0.87.

I think your container image might just be old. I show tomcat-9.0.117-1.el9.noarch which has the FFM support. Also, we haven't seen any CI tests failing.

[jeremylenz]

That was it, I just had to pull a new image.

This led me to discover that there is only foremanctl pull-images, and no forge pull-images. raised a PR: #631