Update to jdk-11.0.12.0+8
    
    Update release notes to 11.0.12.0+8
    Update tarball generation script to use git following OpenJDK 11u's move to github
    Remove "-clean" suffix as no 11.0.13 builds are unclean.
    Drop JDK-8269668 patch which is now applied upstream.
    
    Add patch to login to the NSS software token when in FIPS mode.
    Extend the default security policy to accomodate PKCS11 accessing jdk.internal.misc.
    Add patch to allow plain key import
    Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
    
    Restructure the build so a minimal initial build is then used for the final build (with docs)
    This reduces pressure on the system JDK and ensures the JDK being built can do a full build
    
    Minor cosmetic improvements to make spec more comparable between variants
    Added posttrans hook which persists the sanity of dir->symlink in case of update from ancient versions