Revert to using RSA for module signatures

When the kernel is in FIPS mode, ECDSA is not supported and modules signed with ECDSA will fail to load (even if Lockdown is not active).

This was fixed in later kernel versions, but it seems safer to revert to using RSA signatures than to backport those changes.

Closes: #1114773