Goal

Backport the patches in systemd-ukify that update the upstream sbat for uki addons and uki.More precisely, it should be upstream 121c4eb and optionally 180f957

We are working downstream in kernel-uki-virt-addons rpm to get also a sbat for uki addons downstream.

If it's not done, rhel 9.x will create addons/uki with the old sbat, and rhel 10 (which has these patches) will create addons/uki with the new one

Acceptance criteria

An addon created in rhel9 or 10 has the same sbat string