greenwave: add policy to enforce rmdepcheck for stable updates

See fesco/tickets#3656

Signed-off-by: Adam Williamson <awilliam@redhat.com>

roles/openshift-apps/greenwave/templates/fedora.yaml.j2

@@ -164,6 +164,21 @@ subject_type: koji_build
 rules:
   - !RemoteRule {}
 
+# This policy requires the rmdepcheck dependency validation test to
+# pass for stable release updates. Approved by FESCo in
+# https://forge.fedoraproject.org/fesco/tickets/issues/3656
+--- !Policy
+id: "kojibuild_bodhipush_rmdepcheck"
+{{ product_versions(rawhide='false', branched='false', eln='false') }}
+decision_contexts:
+  - bodhi_update_push_testing
+  - bodhi_update_push_testing_critpath
+  - bodhi_update_push_stable
+  - bodhi_update_push_stable_critpath
+subject_type: koji_build
+rules:
+  - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.rmdepcheck.functional}
+
 # For critical path updates in stable and Branched, we require passes
 # for most openQA update tests. These policies contains the tests we run
 # on all releases; there are some additional policies which contain