feat(tpm): add read-only TPM validation

iso/builder/smoketest.sh

@@ -43,7 +43,7 @@ info "nvidia modules flavor: ${NVIDIA_MODULES_FLAVOR}"
 
 # --- PATH & binaries ---
 echo "-- PATH & binaries --"
-for tool in dmidecode smartctl nvme ipmitool lspci bee; do
+for tool in dmidecode smartctl nvme ipmitool lspci tpm2_getcap tpm2_pcrread tpm2_gettestresult bee; do
     if p=$(PATH="/usr/local/bin:/usr/sbin:/sbin:$PATH" command -v "$tool" 2>/dev/null); then
         ok "$tool found: $p"
     else