edk2: fix up UEFI firmware build for QEMU and add secure boot flag