We have to be sure we are testing correct build created from correct upstream commit. We also have to check expected images are pulled when running ossm.

AC:

• new stage should be added to downstream pipeline
• the test should check commit hash which was used for the build - e.g. in pilot and istio-cni we have commit hash here this could be compared with actual commit in upstream repo
• the test must check commit hashes for all OSSM images
• the test must check that correct images are referenced in relatedImages