DEFAULT: switch to rh-allow-sha1-signatures = no (Changes/OpenSSLDistrustSHA1SigVer)
DEFAULT is now same as TEST-FEDORA41, FEDORA40 is now offered with the contents of the old DEFAULT.
Context: https://fedoraproject.org/wiki/Changes/OpenSSLDistrustSHA1SigVer