Add Agilex 5 FCS and wolfBoot integration

[aidangarske]

Description

• Adds Agilex 5 SDM crypto offload through the GSRD libFCS provider
• Enables wolfSSL, wolfcrypttest, and wolfcryptbenchmark in Agilex 5 images
• Adds wolfBoot integration for the SPL → TF-A → wolfBoot → signed FIT chain
• Defines the four-partition A/B wolfBoot WIC layout
• Adds Kas fragments for reproducible wolfSSL and wolfBoot customer builds
• Documents concise virtual-owner provisioning and hardware acceptance requirements
• Pins the tested rebased wolfSSL port revision for reproducible builds

[Copilot]

Pull request overview

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Adds Agilex 5 support for wolfBoot-based verified boot and wolfSSL SDM crypto offload via libfcs, including reproducible Kas fragments and documentation for provisioning/acceptance.

Changes:

• Introduces Agilex 5 wolfBoot integration (BL33 payload swap, signed FIT flow, and A/B WIC layout).
• Adds libfcs recipe + wolfSSL bbappend for Agilex 5 SDM crypto offload, plus a GSRD-provider bbappend for linker symlink.
• Adds Kas fragments and documentation for reproducible builds and hardware validation steps.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
wic/agilex5-wolfboot.wks	Defines 4-partition SD layout with wolfBoot A/B raw slots and rootfs.
recipes-wolfssl/wolfboot/wolfboot_git.bb	Builds/deploys wolfBoot ELF + flat BIN and generates keystore via native keygen.
recipes-wolfssl/wolfboot/wolfboot.inc	Parameterizes wolfBoot/wolfSSL repo/branch/protocol for pinned builds.
recipes-wolfssl/wolfboot/wolfboot-signed-image.bb	Improves signed output naming to match wolfboot-sign behavior.
recipes-wolfssl/wolfboot/agilex5/kas-wolfboot.yml	Adds Kas fragment enabling wolfBoot + pinned sources and WIC deps.
recipes-wolfssl/wolfboot/agilex5/README.md	Documents Agilex 5 wolfBoot boot chain, build steps, and acceptance criteria.
recipes-wolfssl/wolfboot/README.md	Updates top-level wolfBoot docs for Agilex 5 BL33 integration + new artifact.
recipes-support/libfcs/wolfssl_%.bbappend	Adds wolfSSL configure/DEPENDS wiring for Altera FCS offload.
recipes-support/libfcs/libfcs_git.bb	Adds meta-wolfssl-provided libfcs recipe and Yocto install fixups.
recipes-support/libfcs/gsrd-intel-fcs-lib_%.bbappend	Adds unversioned libFCS.so linker name for GSRD provider recipe.
recipes-support/libfcs/agilex5/kas-wolfssl.yml	Adds Kas fragment enabling wolfSSL+FCS provider and pinned wolfSSL fork rev.
recipes-support/libfcs/agilex5/README.md	Adds detailed Agilex 5 libfcs provisioning/build/deploy/verification guide.
recipes-support/README.md	Links to new libfcs Agilex 5 documentation.
recipes-kernel/linux/linux-socfpga-lts_%.bbappend	Rebuilds FIT with uncompressed kernel when wolfBoot is enabled.
recipes-bsp/u-boot-socfpga/u-boot-socfpga_%.bbappend	Swaps SoCFPGA TF-A FIT BL33 payload to wolfboot.bin when enabled.
conf/layer.conf	Adds dynamic bbappends for Altera BSP + conditional libfcs/wolfSSL integration.
README.md	Updates repository README to mention libfcs (Agilex 5 SDM) under recipes-support.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.