memory: persist attestation bootloader hash

[benma]

And use it in the attestation check.

bootloader_hash_set is added just in case the memory is unexpectedly not 0xFF everywhere (the default value for unused/erased memory).