ci: fih: add pyhsslms to the FIH docker image

Upcoming LMS signature support adds an unconditional
`import pyhsslms` to imgtool's key-loading path. The FIH
workflow bind-mounts the mcuboot tree into the
mcuboot-fih-test container and runs the in-repo
scripts/imgtool.py to derive the bl2 signing public key, so
every imgtool invocation in that workflow will fail with

  ModuleNotFoundError: No module named 'pyhsslms'

once the LMS commits land, unless the container has
pyhsslms available first.

Add pyhsslms to the pip install list in the Dockerfile and
bump FIH_IMAGE_VERSION 0.0.3 -> 0.0.4 so the workflow pulls
a freshly built image. The new tag has to be built and
pushed to ghcr.io/mcu-tools/mcuboot-fih-test:0.0.4
out-of-band by someone with mcu-tools org publish access.
This commit (and the corresponding image push) should land
before the imgtool LMS support commits, so the FIH
workflow stays green throughout.

Assisted-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: David Brown <david.brown@linaro.org>

Author: d3zd3z

ci/fih-tests_config.sh

@@ -6,7 +6,7 @@
 # Copyright (c) 2025 Arm Limited
 #
 
-FIH_IMAGE_VERSION=0.0.4
+FIH_IMAGE_VERSION=0.0.5
 
 FIH_IMAGE_NAME=mcuboot-fih-test
 

ci/fih_test_docker/docker-build/Dockerfile

@@ -45,7 +45,8 @@ RUN . .venv/bin/activate && python3 -m pip install \
     imgtool>=1.9.0 \
     Jinja2>=2.10.3 \
     PyYAML \
-    pyasn1
+    pyasn1 \
+    pyhsslms
 
 # run the command
 CMD ["bash"]