/kind bug
What steps did you take and what happened:
I did a PR review and noticed a file path collision issue:
If two concurrent csctl instances are running, then using the same hashes.json file path will fail randomly.
./.tmp/release/hashes.json
Related PR comment: https://github.com/SovereignCloudStack/csctl/pull/144/files#r1691003556