fix building with SECURE_BOOT_ENABLE
Update CSM integration

No extra patch needed anymore, and paths
changed a bit. CsmSupportLib is also more
similar to the Ovmf version again (but
without their "detect qemu variant" hack)