The final enablement pieces needed for coco tests in systemd CI. Runners will be incus containers, these two commits enable running coco tests with mkosi boot (where image is a directory), then start a confidential guest with vmspawn as part of the test.