Add secure boot key generation and handling guide

[jonathanspw]

trafficstars

This PR adds documentation on how we generate and handle secure boot private keys and certificates. Users may be interested or concerned with this process to ensure we're doing everything we can to ensure security of our keys and subsequently their data.

[jonathanspw]

This looks super straight forward to me, though definitely long and tedious, as it says. :D

I'd like to see also included:

* who is responsible for this key generation

I hesitate to add such a specific for the same reason I didn't include who the actual key holders are. It makes them a target.

* who is responsible for this document

I suppose this technically should be inherited by ALESCo. Will come up with some wording.

* also include a `last updated` date at the top of the doc that gets incremented when/if it's updated in the future, [matching the format that we use for other stuff](https://github.com/AlmaLinux/wiki/blob/master/docs/Contribute-to-Documentation.md):

last updated: YYYY-MM-DD

How about we extend that further with a versioning of the document. Since it may change over time it could be useful to say "AlmaLinux 10 keys were generated with the guide updated YYYY-MM-DD. AlmaLinux 11 keys were generated with YYYY-MM-DD, etc.".

[bennyvasquez]

I hesitate to add such a specific for the same reason I didn't include who the actual key holders are. It makes them a target. ... I suppose this technically should be inherited by ALESCo. Will come up with some wording.

I think indicating that it's a process overseen by ALESCo would be good enough for me. Definitely opposed to naming the actual key owners.

How about we extend that further with a versioning of the document. Since it may change over time it could be useful to say "AlmaLinux 10 keys were generated with the guide updated YYYY-MM-DD. AlmaLinux 11 keys were generated with YYYY-MM-DD, etc.".

Works for me, as long as we also include the last-updated date!

[jonathanspw]

@bennyvasquez all feedback implemented.

[bennyvasquez]

@codyro @andrewlukoshko before we merge this one I'd like your official reviews/approvals