Update downstream patchsets for FLOCKDN (Chipset locking aka PR0) #2213

@MrChromebox updated https://review.coreboot.org/c/coreboot/+/85278

Note that the coreboot matrix thread

We understand that both can't be used at the same time INTEL_CHIPSET_LOCKDOWN=y vs # CONFIG_INTEL_CHIPSET_LOCKDOWN is not set + CONFIG_SOC_INTEL_COMMON_SPI_LOCKDOWN_SMM=y

Other message in thread:

Note that as of now, patches for different platforms grew in forks who use this, and afaik it's mostly heads

So PR0 patches are

• Work for alder lake and meteorlake under dasharo fork (seems self-contained under Dasharo/coreboot@a4f9bd2)
• community attempt under ready to merge kano (26.03) under https://github.com/linuxboot/heads/pull/2133/changes#diff-f1f6f628ec68a607e292baa7e86c813f2d966fc7420b31b7f24ea7f346aed525
• Starlabs patch on top of coreboot upstream 26.07.01 (untested yet AFAIK) https://github.com/linuxboot/heads/pull/2164/changes#diff-12e023b0ef7b98398ffcbd169c5a0f38520f4e87642cc55dd9ffecbadfb3e180

So upstream https://review.coreboot.org/c/coreboot/+/85278 still lack implementation for recent platforms post skylake (Alder lake, meteorlake) that can be upstreamed from the links above @MrChromebox

TODO

• track patchtrains
• port patchtrain under all forks
• update https://github.com/linuxboot/heads/blob/master/doc/wp-notes.md#pr0-chipset-locking