add luks tpm2 lock/unlock scripts with ujust recipes

[bsherman]

@KyleGospo has already added a version of my scripts to Bazzite since Bazzite and Bluefin now have pre-generated initramfs which adds tmp2.

I suggest we add these scripts to config, but make them smart enough to detect if the initramfs has tpm2 (eg, lsinitrd |grep tpm2) and only run the rpm-ostree initramfs commands if needed.

The scripts should be accessible via ujust recipes.

Links reference:

• https://github.com/bsherman/ublue-custom/blob/main/usr/bin/luks-disable-tpm2-autounlock
• https://github.com/bsherman/ublue-custom/blob/main/usr/bin/luks-enable-tpm2-autounlock