Use bookworm instead of testing, added security and non-free-firmware as suggested...

[m1-debian] / TODO

[ ] Check if /boot/esp is mounted otherwise bail on error, for bootstrap check for the file '/debootstrap'
[ ] Re-enable crosscompilation for m1n1_uboot_kernel.sh