Now that we can enable SB on GHA do it by default in mkosi images with selfenroll, and add a smoke test. Also add one CI job that tests the shim integration. This will catch regressions like https://github.com/systemd/systemd/issues/38349
Now that we can enable SB on GHA do it by default in mkosi images with selfenroll, and add a smoke test. Also add one CI job that tests the shim integration. This will catch regressions like https://github.com/systemd/systemd/issues/38349