common: Configure luks + TPM2 + Secure Boot

[JGoutin]

Add configuration to allow TPM2 to unlock Luks system volume when using secure boot.

Eventually, add something to help to regenerate it when there is a major change in configuration, and the password were required to boot.

REF :

• https://fedoramagazine.org/automatically-decrypt-your-disk-using-tpm2/
• https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/
• https://community.frame.work/t/guide-fde-tpm-secure-boot-and-fedora/24347