Add implementation of go-tuf into u-bmc

[MDr164]

As discussed with the authors of racklet.io using go-tuf can yield some nice security gains in the update process of the BMC as well and should be considered to be implemented. A/B partitioning might not be feasible on every SPI chip but certain targets could support it. Others would need to use an override method.