feat: update Model as a Service with real branch data and add opendatahub-operator

- models-as-a-service upstream: add active branches (stable, rhoai, v0.1.x)
  and real branch strategy (main → stable → rhoai auto-propagation)
- models-as-a-service downstream: update active branches to rhoai-3.3 through
  rhoai-3.4-ea.2 (dropping stale rhoai-3.0, rhoai-3.2)
- Add opendatahub-io/opendatahub-operator (upstream, subcomponent: operator)
  with odh-3.4.0-ea.1/ea.2 active branches
- Add red-hat-data-services/opendatahub-operator (downstream, no release
  branches yet)

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: vmrh21

workflows/cve-fixer/component-repository-mappings.json

@@ -23,11 +23,11 @@
             "v2.28.0-fixes",
             "v2.27.0-fixes"
           ],
-          "branch_strategy": "Fix in main → auto-propagates to stable → rhoai (every 2 hours). Manual cherry-pick to release branches during code freeze.",
+          "branch_strategy": "Fix in main \u2192 auto-propagates to stable \u2192 rhoai (every 2 hours). Manual cherry-pick to release branches during code freeze.",
           "cve_fix_workflow": {
             "primary_target": "main",
             "backport_targets": "Active vX.X.X-fixes branches for released versions",
-            "automation": "Auto-sync every 2 hours (main → stable → rhoai)",
+            "automation": "Auto-sync every 2 hours (main \u2192 stable \u2192 rhoai)",
             "manual_intervention": "Cherry-pick during code freeze or for patch releases"
           },
           "repository_type": "monorepo",
@@ -49,36 +49,63 @@
         "opendatahub-io/models-as-a-service": {
           "github_url": "https://github.com/opendatahub-io/models-as-a-service",
           "default_branch": "main",
-          "protected_branches": [],
-          "active_release_branches": [],
-          "branch_strategy": "TBD - needs investigation",
+          "active_release_branches": [
+            "stable",
+            "rhoai",
+            "v0.1.x"
+          ],
+          "branch_strategy": "Fix in main \u2192 auto-propagates to stable \u2192 rhoai. Release branches follow pattern v0.X.x.",
+          "repo_type": "upstream",
+          "subcomponent": "maas-api",
           "cve_fix_workflow": {
             "primary_target": "main",
-            "backport_targets": "TBD",
-            "automation": "Unknown",
-            "manual_intervention": "Unknown"
-          },
-          "build_location": "maas-api/",
-          "notes": "Upstream repository. Contains maas-api Go application. Builds using Dockerfile.konflux for Red Hat builds.",
-          "repo_type": "upstream"
+            "backport_targets": "stable, rhoai, v0.1.x"
+          }
         },
         "red-hat-data-services/models-as-a-service": {
           "github_url": "https://github.com/red-hat-data-services/models-as-a-service",
-          "default_branch": "rhoai-3.0",
-          "protected_branches": [],
+          "default_branch": "main",
           "active_release_branches": [
-            "rhoai-3.0"
+            "rhoai-3.3",
+            "rhoai-3.4",
+            "rhoai-3.4-ea.1",
+            "rhoai-3.4-ea.2"
           ],
-          "branch_strategy": "TBD - needs investigation",
+          "branch_strategy": "Fork of upstream. RHOAI release branches follow pattern rhoai-X.Y.",
+          "repo_type": "downstream",
+          "subcomponent": "maas-api",
           "cve_fix_workflow": {
-            "primary_target": "rhoai-3.0",
-            "backport_targets": "rhoai-3.0",
-            "automation": "Manual backport from upstream",
-            "manual_intervention": "Cherry-pick or re-apply fixes from upstream repo"
-          },
-          "build_location": "maas-api/",
-          "notes": "Downstream Red Hat release repository for maas-api. Fixes from upstream should be backported to rhoai-3.0 branch.",
-          "repo_type": "downstream"
+            "primary_target": "main",
+            "backport_targets": "rhoai-3.3, rhoai-3.4, rhoai-3.4-ea.1, rhoai-3.4-ea.2"
+          }
+        },
+        "opendatahub-io/opendatahub-operator": {
+          "github_url": "https://github.com/opendatahub-io/opendatahub-operator",
+          "default_branch": "main",
+          "active_release_branches": [
+            "odh-3.4.0-ea.1",
+            "odh-3.4.0-ea.2"
+          ],
+          "branch_strategy": "Fix in main. ODH release branches follow pattern odh-X.Y.Z. Also syncs to stable and rhoai branches.",
+          "repo_type": "upstream",
+          "subcomponent": "operator",
+          "notes": "No Dockerfile.konflux RHOAI container label found \u2014 uses rhoai.Dockerfile variant. Container name TBD.",
+          "cve_fix_workflow": {
+            "primary_target": "main",
+            "backport_targets": "odh-3.4.0-ea.1, odh-3.4.0-ea.2"
+          }
+        },
+        "red-hat-data-services/opendatahub-operator": {
+          "github_url": "https://github.com/red-hat-data-services/opendatahub-operator",
+          "default_branch": "main",
+          "active_release_branches": [],
+          "branch_strategy": "Fork of upstream opendatahub-io/opendatahub-operator. No RHOAI release branches yet \u2014 only main/master.",
+          "repo_type": "downstream",
+          "subcomponent": "operator",
+          "cve_fix_workflow": {
+            "primary_target": "main",
+            "backport_targets": "None"
+          }
         }
       }
     },