updates to SystemUpgrade.asciidoc

This mostly includes some proposed (but not yet implemented) fixes for the
'preboot' script hook, and a few formatting changes.
update TODO file

The SELinux stuff was dropped since the SELinux guys assure me that:

a) the old system should always be compatible with the new policy, and
b) if it isn't, that's a bug, and they'll fix it