Pass base_os to integration test components that omitted it

• Pass base_os to integration test components that omitted it

Thirteen component includes across eight tests did not pass base_os, so they fell back to the template default of alpine. Their triggers run an alpine/debian matrix, which means the debian entries were silently running alpine images: verified on !551 (merged), where every job of ValidatePlanDestroy [debian] used a -alpine image. Those entries duplicated the alpine ones and contributed no debian coverage, at a cost of roughly 31 jobs per pipeline.

It also left each trigger's needs describing an image the child pipeline did not use, while the image it did use was undeclared. That has not failed so far only because alpine is always built before debian, which is not a property worth depending on.

Left alone deliberately:

• module-release (CustomCACerts, ModuleRelease, OCIModuleRelease) has no base_os input; it is pinned to debian because it installs zip with apt-get (2b1cf319).
• LockfilePass/LockfileFail, because lockfile-mode sets no GITLAB_OPENTOFU_BASE_IMAGE_OS and the input would resolve empty.