[coreboot-gerrit] [M] Change in coreboot[main]: boot_device: Add boot_device_lockdown