Refresh the guest package lock

[github-actions]

Arch moved since the guest package lock was written. This adds guest-build/0049-Refresh-the-guest-package-lock.patch so the next prepared guest image builds from the current packages instead of refusing on lock drift.

Package changes:

ca-certificates-mozilla 3.128-1 -> 3.129-1
chromium 152.0.7977.82-1 -> 153.0.8010.36-1
dua-cli 2.44.0-1 -> 2.45.0-1
fzf 0.74.3-1 -> 0.74.4-1
gcr-4 4.4.0.1-1 -> 4.4.1-1
gpu-screen-recorder 6.1.1-1 -> 6.1.2-1
gvfs 1.60.2-4 -> 1.60.3-1
hyprland 0.56.2-2 -> 0.56.2-3
libgcrypt 1.12.3-1 -> 1.12.4-1
libldap 2.6.13-1 -> 2.7.1-1
libportal 0.10.0-1 -> 0.11.0-1
libportal-gtk4 0.10.0-1 -> 0.11.0-1
mkinitcpio 41.1-1 -> 42-1
nss 3.128-1 -> 3.129-1
upower 1.91.3-1 -> 1.91.4-1
atkmm 2.28.5-2 (new)
cairomm 1.14.6-1 (new)
fmt 12.2.0-1 (new)
glibmm 2.66.10-1 (new)
gpsd 3.27.5-1 (new)
gtk-layer-shell 0.10.1-1 (new)
gtkmm3 3.24.11-1 (new)
jsoncpp 1.9.8-1 (new)
libdbusmenu-glib 18.10.20180917-2 (new)
libdbusmenu-gtk3 18.10.20180917-2 (new)
libmpdclient 2.27-1 (new)
libsigc++ 2.12.2-1 (new)
pangomm 2.46.5-1 (new)
playerctl 2.4.1-5 (new)
pps-tools 1.0.3-2 (new)
spdlog 1.17.0-2 (new)
hyprwayland-scanner (removed)

The guest contract tests passed with the patch applied. CI does not run automatically on a pull request opened with the workflow token; close and reopen it, or push an empty commit, to trigger the checks before merging.