Updated Busybox configuration and removed (Busybox: #4784) workaround
Enabled DEBUG_FS for use by PowerTOP

Also changed CONFIGFS_FS back to 'y' so that it can be mounted
automatically by OpenRC.
Added kernel support for CAMELLIA, SERPENT, TWOFISH ciphers
Replaced early boot SquashFS hashing with DM-Verity

Prior to DM-Verity setup, key superblock properties are verified
(including hash algorithm).

The "cdroot_hash" boot parameter is now prefixed with a 4096-bytes
blocks offset from the end of SquashFS image, where DM-Verity
data starts.

Also removed qemulate.sh script, since supporting direct SquashFS
mount would become too cumbersome for such a rarely used feature.
Upgraded linux-firmware and removed the deprecated amd-ucode package
Updated PolKit and its SpiderMonkey Javascript engine