kconfig: add optee rpmb setup in Kconfig menu

Signed-off-by: Ivan Mikhaylov <[email protected]>

Kconfig

@@ -125,11 +125,25 @@ config SECURE_BOOT
 	  This uses the public custMpk.key and certificate by default. Do not
 	  use this key in production, it is for demonstration purposes only.
 
+config RPMB_SETUP
+	bool "OPTEE RPMB setup for OTP key write"
+	depends on IMAGE_BOOT_PG2 && !SECURE_BOOT
+	help
+	   Enable one-time pairing between processor and secure storage
+	   (RPMB on eMMC). Do not sign and distribute this version. Run it
+	   only in a secure environment on the target device, then replace it
+	   with signed production firmware and enable secure boot.
+
 config KAS_INCLUDE_SECURE_BOOT
 	string
 	default "kas/opt/secure-boot.yml"
 	depends on SECURE_BOOT
 
+config KAS_INCLUDE_RPMB_SETUP
+	string
+	default "kas/opt/rpmb-setup.yml"
+	depends on RPMB_SETUP
+
 comment "Build options"
 
 config SDK