[scripts] add hardened-kernel-bump.sh script