Change ujust setup-tpm-autounlock to allow for FIDO2 device use

[Retr0r0cket]

Systemd-cryptenroll also has FIDO2 support, so there’s no reason to leave it out. I’d like to make a selector that allows for users to choose to require any of:

• A pin
• Secure boot based tpm key
• FIDO2 based tpm key

Shouldn’t be too hard to make