root: Dump LUKS headers into the image to allow reencryption
initramfs compares LUKS headers with the ones known at image building time to determine whether rootfs needs to be reencrypted on-device.
Makes librem5-base!340 (merged) work at first boot after reflash.
Edited by Sebastian Krzyszkowiak