Enable secure boot and full disk encryption for Orin-based NVIDIA devices

Part of Enable secure boot and full disk encryption for all device types · Balena Feature Requests, but as that progresses one type at a time, here’s the request for Orin-based NVIDIA devices