Investigate dropping requirement for ` --security-opt label=type:unconfined_t`

[cgwalters]

Moving this from #826 (comment)

Basically it'd be nice if we could simplify the install invocations and drop --security-opt label=type:unconfined_t. In some testing, it works fine without it with a Fedora 40 host (podman machine 40.20241019.2.0, podman version 5.2.5). It also works on a C9S host (podman-5.3.1-1.el9.x86_64).

Actually, things also work with podman version 4.9.4-rhel from RHEL 9.4.

Soo...yeah, let's try just taking this out of all of our CI and see if anything breaks.