Pin the CLN mirror before the package download, not before

Makes sure we actually download the packages in the same cache the following steps will use.
Otherwise a sneaky DNF transaction could be executed between the two DNF actors and break something.

Author: prilr

repos/system_upgrade/cloudlinux/actors/pinclnmirror/actor.py

@@ -24,7 +24,7 @@ class PinClnMirror(Actor):
     name = 'pin_cln_mirror'
     consumes = ()
     produces = ()
-    tags = (IPUWorkflowTag, DownloadPhaseTag.After)
+    tags = (IPUWorkflowTag, DownloadPhaseTag.Before)
 
     CLN_REPO_ID = "cloudlinux-x86_64-server-8"
     DEFAULT_CLN_MIRROR = "https://xmlrpc.cln.cloudlinux.com/XMLRPC/"