Track functional test material from rh-openjdk repos

[smlambert]

We pull test material from several rh-openjdk repositories, ssl-tests, CryptoTest and TestHeadlessComponents. We should be logging SHAs of the test material that is used in a test run into our TAP files.

We must also ensure that if we are calling into scripts, they are not opaquely installing untracked other dependencies onto machines.

[sophia-guo]

Close as part of #5818