[coreboot-gerrit] Change in coreboot[master]: lockdown: Add Kconfigs for SPI media protection mode