feat(tpm): add read-only TPM validation

audit/internal/platform/sat.go

@@ -50,6 +50,9 @@ const (
 	// RAM: memtester 512 MB / 1 pass (extrapolated from validate timing, linear with size).
 	SATEstimatedMemoryStressSec = 140
 
+	// TPM capabilities, PCR values, and existing self-test result queries.
+	SATEstimatedTPMValidateSec = 5
+
 	// NVIDIA dcgmi diag Level 2 (medium), all GPUs simultaneously.
 	SATEstimatedNvidiaGPUValidateSec = 85
 	// NVIDIA dcgmi diag Level 3 (targeted stress), all GPUs simultaneously.