Summary
Add support for extending TDX RTMR3 with initdata digest when running on TDX-enabled platforms, similar to the current TPM PCR8 extension.
Current Behavior
- Workload measurement via
tpm2_pcrextend 8:sha256=$(head -c64 /run/peerpod/initdata.digest)
- Works with TPM/vTPM but fails silently on TDX-only environments
- No workload reflection in TDX attestation when TPM is unavailable