Set SBAT in sd-boot when building on OBS
    
    We are doing self-signing, so don't tag the EFI binaries as if
    they were Fedora's, since they are not. Set upstream-specific
    tags, that are the same for all distros built on OBS..
    
    [skip changelog]