Secureboot build - automation and logging

[NeilHanlon]

We need the ability to automatically build, test, and release updates to secureboot-affected pacakges: kernel, fwupd, grub2, shim. (UKIs in the future).

Need to understand requirements not only from RESF policy wise but UEFI committee, too.

[SherifNagy]

Also we need to keep the following:
*A DB that contains all the signed efi binary hashes
*A sigstore for what is being signed