Resolve "Ensure that hardening_manifest/podman downloaded images do not clobber a registry1 image"

Relates to #389

Testing:

Testing a bad Dockerfile: https://code-ib-green.staging.dso.mil/dsop/opensource/thanos/thanos/-/jobs/14796

Testing a clobbered registry in the HM: https://code-ib-green.staging.dso.mil/dsop/opensource/thanos/thanos/-/jobs/14363