koji_hub: add fwupd to list of secure-boot packages
    
    Turns out fwupd needs to also be signed right for secure-boot, so we
    should add it to the list of packages in koji that needs the secure-boot
    permission. This should prevent provenpackagers from building it and
    pushing out an inoperative one.
    
    Signed-off-by: Kevin Fenzi <kevin@scrye.com>