Add disabling SECURITY_LOCKDOWN_LSM to chapter-common-tasks

Running just scripts/config --disable MODULE_SIG will not actually disable module signing, as SECURITY_LOCKDOWN_LSM forces it on.