Fix the package-and-qa and review-build-cng jobs
What does this MR do?
By changing the review-build-cng job to be a single-script-job, the
repository content wasn't there, including the *_VERSION files, thus
leading to missing variables for components in the triggered pipeline.
Does this MR meet the acceptance criteria?
-
Conforms to the code review guidelines -
Conforms to the merge request performance guidelines -
Conforms to the style guides -
Conforms to the database guides -
Security reports checked/validated by reviewer