For the tumbleweed systems enabling TPM2 auto-unlocking with grub2, it's
necessary to update the signature of the sealed key after upgrading grub2
and shim with the help of fde-tpm-helper-rpm-macros. Since the build target
of openSUSE:Factory:secure-boot is 15.5 where fde-tools is absent, the
macros of the helper won't be included in shim rpm.

This request links openSUSE:Factory/fde-tools, so that the rpm macros will
be available for shim. It also requires "%shim_use_fde_tpm_helper" to set
to 1 in prjconf when building against 15.5.