- Matches recent fix in https://github.com/acidanthera/audk/commit/dbebb53c11796e30dd2b6f980898e6c9bbe53bf6
 - Correct usage is for bits here to only ever be manually enabled for specific debugging tasks

 - Matches value used in OpenCore
 - Allows AppleEfiSignTool to work with W^X error legacy Apple images
Futher work required for AppleEfiSignTool to work with section overlap error images.

OpenDuet/OcBootManagementLib: Disable W^X auto-fix in Duet, and move fix for all Apple images to FixupAppleEfiImages quirk
Duet then matches behaviour of OVMF, and quirk can be used in both Duet and OVMF to load legacy Apple images.

OcBootManagementLib: Add missing explicit initialisation of mImageLoaderCaps in OcImageLoaderLoad (#496)

Fix mentioned in changelog incorporates this and the previous commit

 - UEFI symbols loaded
 - Cannot see stack properly
 - Cannot see local variables properly
 - Can do some successful stepping around in the code

Also includes not-quite-working 32-bit on 64-bit LLDB support

In addition to existing support for 32-bit on 64-bit

Introduced by 546aa5ba

Thx @dakanji

 - shim-make.tool
 - sbat-info.tool
 - unsign-efi-sig-list.tool
and update shim-to-cert.tool

If set by bootloader chained from shim before further image is loaded, instructs
shim to keep its protocol and its security overrides (if enabled) present for all
image loads, not just the first.