Also disable secureboot signing by default, and explicitly enable it in the CI.
This makes local builds easier, where you dont have the secureboot CA available.
Signed-off-by: Dorian Stoll <dorian.stoll@tmsp.io>
Instead of text files it downloads garbage so the surface config file
gets corrupted. Downgrade it until the issue is resolved upstream
Signed-off-by: Dorian Stoll <dorian.stoll@tmsp.io>
