build-sys: Rework sealing to be one build step#1898

cgwalters wants to merge 2 commits intobootc-dev:mainbootc-dev/bootc:mainfrom

cgwalters:sealed-scratch-rebasecgwalters/bootc:sealed-scratch-rebaseCopy head branch name to clipboard