container: support passing registry aliases for substitution in pre-bom stage

[setchy]

We make extensive use of workspace global env variables to define our $PRIVATE_ARTIFACT_REGISTRY, which is used in image statements such as $PRIVATE_ARTIFACT_REGISTRY/node:latest

This enhancement suggestion is to support providing a list of registry aliases that will be substituted during the BOM process.

The equivalent of this in Renovate is documented here - https://docs.renovatebot.com/configuration-options/#registryaliases

[prabhu]

I am also open to adding a parser for renovate and dependabot configuration. We can gradually expand on support for formulation and settings like these would help.