NO-ISSUE: Stop tracking go.work.sum to fix recurring merge conflicts

.gitignore

@@ -25,6 +25,20 @@ __debug_bin*
 # Go coverage tool output (e.g. LiteIDE)
 *.out
 
+# go.work.sum is a derived, workspace-level checksum cache regenerated
+# automatically by `go build`/`go mod download`/`go test` from the repo
+# root. It grows non-deterministically depending on what each contributor
+# happens to build locally, which caused near-constant merge conflicts
+# unrelated to any actual code change. GitHub's default Go .gitignore
+# template excludes go.work/go.work.sum for this reason; the upstream
+# discussion (golang/go#53502) is specifically about whether to commit
+# go.work, not a settled verdict on go.work.sum on its own. Untracking it
+# doesn't cost build reproducibility here: each component's Containerfile
+# regenerates go.work.sum during its own `go mod download` step (see e.g.
+# fulfillment-service/Containerfile) rather than relying on a copied-in
+# committed copy.
+/go.work.sum
+
 # editor and IDE paraphernalia
 .idea
 .vscode

bare-metal-fulfillment-operator/Containerfile

@@ -5,7 +5,10 @@ ARG TARGETOS
 ARG TARGETARCH
 
 WORKDIR /opt/app-root/src
-COPY --chown=1001:1001 go.work go.work.sum ./
+# go.work.sum is intentionally not copied in -- it's not committed to the
+# repo (see root .gitignore); `go mod download` below regenerates it inside
+# the build using the go.sum files already copied in per module.
+COPY --chown=1001:1001 go.work ./
 COPY --chown=1001:1001 bare-metal-fulfillment-operator/go.mod bare-metal-fulfillment-operator/go.sum bare-metal-fulfillment-operator/
 COPY --chown=1001:1001 osac-operator/go.mod osac-operator/go.sum osac-operator/
 COPY --chown=1001:1001 osac-operator/api/go.mod osac-operator/api/go.sum osac-operator/api/

fulfillment-service/Containerfile

@@ -5,8 +5,11 @@ FROM registry.access.redhat.com/ubi10/go-toolset:1.26 AS builder
 ARG DEBUG=false
 
 # Copy go.work and all workspace go.mod/go.sum files for dependency caching.
+# go.work.sum is intentionally not copied in -- it's not committed to the
+# repo (see root .gitignore); `go mod download` below regenerates it inside
+# the build using the go.sum files already copied in per module.
 WORKDIR /opt/app-root/src
-COPY --chown=1001:1001 go.work go.work.sum ./
+COPY --chown=1001:1001 go.work ./
 COPY --chown=1001:1001 fulfillment-service/go.mod fulfillment-service/go.sum fulfillment-service/
 COPY --chown=1001:1001 bare-metal-fulfillment-operator/go.mod bare-metal-fulfillment-operator/go.sum bare-metal-fulfillment-operator/
 COPY --chown=1001:1001 osac-operator/go.mod osac-operator/go.sum osac-operator/