[Bug]: Certificate error when running "curl https://mirrors.almalinux.org" in AlmaLinux 10 container with --arch=x86_64 on apple silicon

### I have done the following

- [x] I have searched the existing issues
- [ ] If possible, I've reproduced the issue using the 'main' branch of this project

### Steps to reproduce

On a apple silicon mac, run a AlmaLinux 10 container with --arch=x86_64:

`$ container run -it --rm --arch=x86_64 almalinux:10 /bin/bash`

In the container, verify its x86_64:

```
[root@1335f26e-d125-48b1-a60b-43b839f4971d /]# uname -m
x86_64
```

Now run curl:

```
[root@1335f26e-d125-48b1-a60b-43b839f4971d /]# curl -v https://mirrors.almalinux.org
* Host mirrors.almalinux.org:443 was resolved.
* IPv6: 2600:1f10:4a78:1403:1592:cd7e:6f03:160e, 2600:1f10:4a78:1400:b870:64db:2f13:c01, 2600:1f10:4a78:1402:cdb:253:2545:a59d, 2600:1f10:4a78:1405:4376:ef8a:a707:eb05, 2600:1f10:4a78:1401:545f:bb16:701e:f84b, 2600:1f10:4a78:1404:18f0:640a:8697:5911
* IPv4: 34.232.243.153, 100.26.171.159, 44.194.43.115, 52.70.149.118, 3.213.188.98, 100.51.47.231
* Trying [2600:1f10:4a78:1403:1592:cd7e:6f03:160e]:443...
* Immediate connect fail for 2600:1f10:4a78:1403:1592:cd7e:6f03:160e: Network is unreachable
* Trying [2600:1f10:4a78:1400:b870:64db:2f13:c01]:443...
* Immediate connect fail for 2600:1f10:4a78:1400:b870:64db:2f13:c01: Network is unreachable
* Trying [2600:1f10:4a78:1402:cdb:253:2545:a59d]:443...
* Immediate connect fail for 2600:1f10:4a78:1402:cdb:253:2545:a59d: Network is unreachable
* Trying [2600:1f10:4a78:1405:4376:ef8a:a707:eb05]:443...
* Immediate connect fail for 2600:1f10:4a78:1405:4376:ef8a:a707:eb05: Network is unreachable
* Trying [2600:1f10:4a78:1401:545f:bb16:701e:f84b]:443...
* Immediate connect fail for 2600:1f10:4a78:1401:545f:bb16:701e:f84b: Network is unreachable
* Trying [2600:1f10:4a78:1404:18f0:640a:8697:5911]:443...
* Immediate connect fail for 2600:1f10:4a78:1404:18f0:640a:8697:5911: Network is unreachable
* Trying 34.232.243.153:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
* CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, decrypt error (563):
* TLS connect error: error:030000EA:digital envelope routines::provider signature failure
* closing connection #0
curl: (35) TLS connect error: error:030000EA:digital envelope routines::provider signature failure
[root@1335f26e-d125-48b1-a60b-43b839f4971d /]#

```

This means you can not install additonal packages or update them using dnf, as the first thing dnf does, is to download the mirrorlist.

### Current behavior

curl connection to https://mirrors.almalinux.org fails, , in consequence `dnf upgrade -y --refresh` fails

### Expected behavior

The curl connection succeds and the mirrorlist can be downloaded, `dnf upgrade -y --refresh` works

### Environment

```markdown
- OS: macOS 26.2
- Xcode: Latest, but not involved in this case
- Container: CLI version 0.9.0
```

### Relevant log output

```shell
[root@1335f26e-d125-48b1-a60b-43b839f4971d /]# curl -v https://mirrors.almalinux.org
* Host mirrors.almalinux.org:443 was resolved.
* IPv6: 2600:1f10:4a78:1403:1592:cd7e:6f03:160e, 2600:1f10:4a78:1400:b870:64db:2f13:c01, 2600:1f10:4a78:1402:cdb:253:2545:a59d, 2600:1f10:4a78:1405:4376:ef8a:a707:eb05, 2600:1f10:4a78:1401:545f:bb16:701e:f84b, 2600:1f10:4a78:1404:18f0:640a:8697:5911
* IPv4: 34.232.243.153, 100.26.171.159, 44.194.43.115, 52.70.149.118, 3.213.188.98, 100.51.47.231
* Trying [2600:1f10:4a78:1403:1592:cd7e:6f03:160e]:443...
* Immediate connect fail for 2600:1f10:4a78:1403:1592:cd7e:6f03:160e: Network is unreachable
* Trying [2600:1f10:4a78:1400:b870:64db:2f13:c01]:443...
* Immediate connect fail for 2600:1f10:4a78:1400:b870:64db:2f13:c01: Network is unreachable
* Trying [2600:1f10:4a78:1402:cdb:253:2545:a59d]:443...
* Immediate connect fail for 2600:1f10:4a78:1402:cdb:253:2545:a59d: Network is unreachable
* Trying [2600:1f10:4a78:1405:4376:ef8a:a707:eb05]:443...
* Immediate connect fail for 2600:1f10:4a78:1405:4376:ef8a:a707:eb05: Network is unreachable
* Trying [2600:1f10:4a78:1401:545f:bb16:701e:f84b]:443...
* Immediate connect fail for 2600:1f10:4a78:1401:545f:bb16:701e:f84b: Network is unreachable
* Trying [2600:1f10:4a78:1404:18f0:640a:8697:5911]:443...
* Immediate connect fail for 2600:1f10:4a78:1404:18f0:640a:8697:5911: Network is unreachable
* Trying 34.232.243.153:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
* CApath: none
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, decrypt error (563):
* TLS connect error: error:030000EA:digital envelope routines::provider signature failure
* closing connection #0
curl: (35) TLS connect error: error:030000EA:digital envelope routines::provider signature failure
```

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Start by reproducing the failure with `container run -it --rm --arch=x86_64 almalinux:10 /bin/bash`, then test `curl -v https://mirrors.almalinux.org` and `dnf upgrade -y --refresh` in the container. Trace the container networking and TLS behavior for x86_64 guests on Apple silicon; done means the HTTPS request and refreshed dnf operation succeed.

Written by the indexing model from the issue text.