Investigate coreboot hashing -> TPM extend timings for additional tamper evidence proof (spkmodem?)

CircleCI publishes dirty build for clean commit, hash mismatch vs local build

Introduce Heads' SBOM (OSFF grant)

T480S Heads firmware lack ACPI P-state tables.

usb keyboard initialization is brocken

not all bin/ scripts make sure bash scripts use env (nix support etc)

mirrors are attempted to ipv6 and fails, wget waits too long for retry

Fix issue/feature templates at https://github.com/linuxboot/heads/tree/master/.github%2FISSUE_TEMPLATE

Support building EC firmware for Novacustom

Sealing key doesn't support unbound keyslots