chore(coreutils): revert mv, cp, rm to gnu coreutils

[ahmedadan]

As per https://discourse.ubuntu.com/t/an-update-on-rust-coreutils/80773

cp, mv, and rm continue to be provided by GNU coreutils in 26.04. These utilities have remaining open TOCTOU (time-of-check to time-of-use) issues (8 as of Apr 22, 2026) that need to be resolved before we are confident shipping them.

We should make sure the default in https://github.com/projectbluefin/dakota for cp, mv, and rm are from GNU coreutils

Closes projectbluefin/common#290

Did a sanity on my local build:

=== unprefixed cp/mv/rm must be GNU ===
/usr/bin/cp -> /usr/bin/cp
  version: cp (GNU coreutils) 9.7
/usr/bin/mv -> /usr/bin/mv
  version: mv (GNU coreutils) 9.7
/usr/bin/rm -> /usr/bin/rm
  version: rm (GNU coreutils) 9.7

=== uutils- prefixed aliases must still exist and be uutils ===
/usr/bin/uutils-cp -> uutils-coreutils
  version: cp (uutils coreutils) 0.8.0
/usr/bin/uutils-mv -> uutils-coreutils
  version: mv (uutils coreutils) 0.8.0
/usr/bin/uutils-rm -> uutils-coreutils
  version: rm (uutils coreutils) 0.8.0

=== sanity: other applets still default to uutils ===
/usr/bin/ls -> /usr/bin/uutils-coreutils
/usr/bin/cat -> /usr/bin/uutils-coreutils
/usr/bin/chmod -> /usr/bin/uutils-coreutils

[gemini-code-assist]

Code Review

This pull request modifies elements/bluefin/uutils-coreutils.bst to exclude cp, mv, and rm from being symlinked to uutils-coreutils due to TOCTOU security vulnerabilities. The review feedback suggests moving the exclusion logic to the beginning of the loop to also prevent the creation of uutils- prefixed symlinks for these tools, ensuring they are not exposed in the final image.