We need to ship Secureboot Certificates in a known location for RHEL 8

Description of problem:

Certain packages build using Secureboot certificates, in RHEL 9 we packaged the public certificates in well-known locations so that pesign'd packages can buildrequire them into the buildroot.

Additional info:
Even though this bug is for the RHEL portion here's a link to how we handled Stream 9: https://gitlab.com/redhat/centos-stream/rpms/centos-release/-/merge_requests/12