Draft: Prepare for EFI signing
Currently we have no integration whatsoever of the systemd boot stuff, so let's push this out into it's own package. There we can prepare for signing the included EFI binary.
bootctl
will not be able to find the signed binary yet, I think about just diverting and install the signed into the same place.