shim 15

- better checking for bad linker output
- flicker-free console if there's no error output
- improved http boot support
- better protocol re-installation
- dhcp proxy support
- tpm measurement even when verification is disabled
- REQUIRE_TPM build flag
- more reproducable builds
- measurement of everything verified through shim_verify()
- coverity and scan-build checker make targets
- misc cleanups
- currently we don't support multiple certificates in our local
  certificate databases, but pjones was wrong about why, and it's not
  Michael Brown's fault at all.  Please disregard the statement in
  commit cdbfb5a6
-----BEGIN PGP SIGNATURE-----
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=ihQJ
-----END PGP SIGNATURE-----